Separate names with a comma.
Isn't it already available at
Or via the main menu under Raw Access Logs?
It probably would be helpful if you could post the .htaccess file contents here for us to help you better.
In my experience, the onus is on the user to decide on the security vs convenience argument. The way hotlink protection works is simple:
Why Not Script It?
Assuming you're hosting on a Linux server, this shell script might be able to do the job just fine: