Hello,
OK, thanks for the answer. For the reason for the protection, right now, if someone knows the path of the video on the server, they can directly access it without having to login or anything. For the pictures, currently, the originals are protected (and you go through the PHP file which, I assume, checks session credentials). The smaller "cached" versions are indeed visible (although adding a .htaccess there only slows things down but does not break anything) but the names are at least hashed making it a little harder to get to.
Basically, I wanted something that would check for proper credentials before serving the file (using the .htprivate files for example). Does that make sense?
Thanks, Romain
|