Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 99657 invoked from network); 28 Apr 2008 00:16:48 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 28 Apr 2008 00:16:48 -0000 Received: (qmail 92375 invoked by uid 500); 28 Apr 2008 00:16:39 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 92358 invoked by uid 500); 28 Apr 2008 00:16:39 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 92347 invoked by uid 99); 28 Apr 2008 00:16:39 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 27 Apr 2008 17:16:39 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of jslive@gmail.com designates 74.125.46.158 as permitted sender) Received: from [74.125.46.158] (HELO yw-out-1718.google.com) (74.125.46.158) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 28 Apr 2008 00:15:55 +0000 Received: by yw-out-1718.google.com with SMTP id 5so2012562ywr.84 for ; Sun, 27 Apr 2008 17:16:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=UEEr8OLq6nSdP9WAdHroawvwZkQMZ/erSjjpYc3qLDA=; b=e75DrbdDn75ApxmUhPdV9r+njW975+qZds4Se1b4ZCiv1G0XPQa3o/6RDgdHfbf5YJI14ZJ+e0+YUrf262SAwf4goXxIfhi/O8kr6EXWX434muzw5qd9VUr+oTvO//qang5FToggtIS0AePPbrlsT/mNwQ17Le+LaSRs1vhnjN8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=W/b/E+hQVYVo9O1KKOZkiFzxuQGtvpOqhcx/MmuqOUdYC5dWSpYJSKWa0sSInpcrjce8IJB0t5EbWd1pugapGf7Rps01VmNkGmU6z2gFyJbVwqItKxdonTt0j+XIM7M7wD50T40sNXSL3TcXEWAdKLjtuzUt4nKY7IUe/ENt4Ys= Received: by 10.150.82.41 with SMTP id f41mr3104503ybb.172.1209341768993; Sun, 27 Apr 2008 17:16:08 -0700 (PDT) Received: by 10.151.45.6 with HTTP; Sun, 27 Apr 2008 17:16:08 -0700 (PDT) Message-ID: Date: Sun, 27 Apr 2008 20:16:08 -0400 From: "Joshua Slive" Sender: jslive@gmail.com To: users@httpd.apache.org In-Reply-To: <4815127A.5090205@blazestudios.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <4815127A.5090205@blazestudios.com> X-Google-Sender-Auth: ba99c01162db0ad7 X-Virus-Checked: Checked by ClamAV on apache.org Subject: Re: [users@httpd] .htaccess assistance On Sun, Apr 27, 2008 at 7:55 PM, Tom Ray [Lists] wrote: > Hey, > > I'm trying to setup something up where I have a video player on the main > page of the site but the .flv files are in a directory such as videos/files. > What I would like to do is use .htaccess to block the direct calling for > those files so they can't be downloaded but I still want the site to be able > to load the files for viewing through the video player. Every combo I try > stops the direct calling of the file but the player also can't seem to load > it. > > I try: > > Order deny,allow > deny from all > allow from 127.0.0.1 (used the IP of the site, etc( > > And I still get nothing. Any help would be appreciated. I want to make sure > I block the files from people but the webserver can still load and use them. You want something like the "prevent image theft" example here: http://httpd.apache.org/docs/2.2/env.html#examples But that will only work if the video players typically send reasonable referers. Joshua. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org