Prevent Hot Linking -- Wimpy Player

[michi]

Hi,

I'm trying to figure out how to prevent users from "hotlinking" to mp3 files on my web server. Here is how I want the website to be:

1) Users can listen to music using Wimpy Button (http://www.wimpyplayer.com/products/wimpy_button.html).

2) Users should not be able to download music directly.

Here are the two problems I'm facing:

1) The mp3 files must be under DocumentRoot.

2) .htaccess cannot be used to restrict access because Wimpy Button sends blank http referer.

Any suggestion would be appreciated,
--Michi

[Odd_Bloke]

I haven't used .htaccess extensively or for a while but if the Wimpy button was going to be the only thing sending a blank http referer, then surely you could use .htaccess to exclude anyone who does send one? Or have I missed the point?

[michi]

Hi Odd_bloke,

The problem is that the Wimpy Button is not the only thing sending a blank http referer. The http referer value is blank if the request is a URL type-in. So the users can simply type in the URL of the mp3 file and listen to and/or download the music.

--Michi