httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Octavian Rasnita" <orasn...@gmail.com>
Subject Re: [users@httpd] Re: how to prevent mp3 downloading ?
Date Mon, 23 Mar 2009 06:19:34 GMT
From: "J. Bakshi" <joydeep@infoservices.in>
To: <users@httpd.apache.org>> Dan Poirier wrote:
>> "J. Bakshi" <joydeep@infoservices.in> writes:
>>
>>   
>>> Eric Covener wrote:
>>>     
>>>> On Fri, Mar 20, 2009 at 7:16 AM, J. Bakshi <joydeep@infoservices.in>
wrote:
>>>>   
>>>>       
>>>>> Dear list,
>>>>>
>>>>> I have a .htaccess ( copied from the some tutorials available in
>>>>> internet ) to disable site grabbers like wget, curl, httrack etc.......
>>>>> and I have tested that these tools are not able to download anything
>>>>> from my site.  nice so far. But If I put the mp3 link available at my
>>>>> site directly in the browser then browser download the mp3. it is also
>>>>> true for images. How can I prevent this ?
>>>>>
>>>>>     
>>>>>         
>>>> You could use mod_rewrite to make sure the referer is set to something
>>>> you expect, but it's still going to ultimately be downloadable.
>>>>
>>>>   
>>>>       
>>> Please suggest what else I can do.
>>> Please
>>>     
>>
>> Please explain what you're trying to do.  It sounds like you just don't
>> want anyone to download your files, but the solution to that is easy -
>> don't put them on your server.
>>   
> 
> Ok, Here I am trying to give you all a more detailed view. At my site
> there are a no. of pages where flash plugins are installed which plays
> mp3 songs online.  The .htaccess has all the site grabber as banned. So
> the site can't be grabbed with curl, wget , httrac etc......

That "protection" is not a protection at all. It is very easy to create an HTTP client with
perl and set it to use the same user agent as Firefox or Internet Explorer, to set the referer
you want, to send/receive/store cookies... do everything a browser does.

> But if you view the page source, you can see the link of the mp3 file.
> As example http://mydomain.com/folder1/song1.mp3  and if you just put
> this link in your browser, it simply give you the "save as" option and
> you can save it with out any trouble. This simply bypass the .htaccess
> restriction and I like to prevent this.

You can't prevent this.
If you could, then the Flash wouldn't be able to download the mp3 file in order to play it.

Some sites like YouTube don't put a direct link to the mp3 file, but to another program that
checks some things like the user agent, the referer, and maybe other things, and that program
offers the content of the mp3 file.
But as you may know, there are very many programs that can be used to download files from
YouTube.

Octavian


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message