Java Mailing List Archive

http://www.apache-httpd.com/

Home » modperl.perl »

Re: secure media files without http_referer

Carl Johnstone

2008-07-07


Author LoginPost Reply
> On Wed, Jul 2, 2008 at 3:18 PM, tmpusr889 <tmpusr889@(protected):
>> A cookie would certainly work, but I was trying to find something
>> simpler. I
>> don't know much about URL tokens. How would something like that work?
>
> Redirect them to a URL with ?auth=x in it. Check the token with an
> access or authz handler.

How about mod_auth_tkt to protect the resources, then you don't need a
mod_perl enabled server.

Use perlbal and redirect behind-the-scenes from a mod_perl auth-checker to
the static resource.

Carl

©2008 apache-httpd.com - Jax Systems, LLC, U.S.A.