how can you allow a mp3 to play but make it hard to steal it off of the server ?

surf · Jan 22, 2007

I got the code below off of Orielly and the download part is commented
out. It allows someone to play a mp3 off of your web server. My friend
has a cheap $10/year 1and1.com account and I couldln't figure out all
what it has, but I just hacked some html and set up a page so people
can play our songs. I then realized however that the file name is right
in the html page and people could probably easily steal the file off
the server. What can I do about that ? What is a better way to easily
allow them to play the mp3 but make it hard to steal it ?

----------------------------------------

<html>

<a href="heighest_heav.mp3" target="_blank"
onclick="javascript

layerOpen('Ex. 1: Acoustic Guitar',this.href);
return false">Play Some Guitar</a>

<script language="JavaScript" type="text/javascript">

var UniqueID = 314 // Make each link open in a new window
var newWinOffset = 0 // Position of first pop-up

function PlayerOpen(soundfiledesc,soundfilepath) {
PlayWin = window.open('',UniqueID,'width=320,height=190,top=' +
newWinOffset
+',left=0,resizable=0,scrollbars=0,titlebar=0,toolbar=0,menubar=0,status=0,directories=0,personalbar=0');
PlayWin.focus();

var winContent = "<HTML><HEAD><TITLE>" + soundfiledesc +
"</TITLE></HEAD><BODY bgcolor='#FF9900'>";
winContent += "<B
style='font-size:18px;font-family:Verdana,sans-serif;line-height:1.5'>"
+ soundfiledesc + "</B>";

winContent += "<OBJECT width='300' height='42'>";
winContent += "<param name='SRC' value='" + soundfilepath + "'>";
winContent += "<param name='AUTOPLAY' VALUE='true'>";
winContent += "<param name='CONTROLLER' VALUE='true'>";
winContent += "<param name='BGCOLOR' VALUE='#FF9900'>";
winContent += "<EMBED SRC='" + soundfilepath + "' AUTOSTART='TRUE'
LOOP='FALSE' WIDTH='300' HEIGHT='42' CONTROLLER='TRUE'
BGCOLOR='#FF9900'></EMBED>";
winContent += "</OBJECT>";



winContent += "<FORM><DIV align='center'><INPUT type='button'
value='Close this window'
onclick='javascript:window.close();'></DIV></FORM>";
winContent += "</BODY></HTML>";

PlayWin.document.write(winContent);
PlayWin.document.close(); // "Finalizes" new window
UniqueID = UniqueID + 1 // newWinOffset = newWinOffset + 20 //
subsequent pop-ups will be this many pixels lower
}
</script>

</html>

dd · Jan 23, 2007

I'm not an expert in this field but I'll throw in my
2 cents worth.

Basically you can't stop it 100%. The best you
can do is to make it difficult so that the dumbest
of users can't do it.

First of all, don't have the pathname of the mp3
directly visible when someone hovers over a link.
They can most likely just right-click it and select
"save target as" and they've got it. Have the click
go to a javascript function instead. Disabling right
click on the page can also help. A lot of sites do
that to prevent people saving images.

It's easy enough for an advanced user to get around
that by using Fiddler or Charles which shows all
http requests and allows you to copy the URL of
the mp3 file. I do that occasionally to grab a .swf
file. You can also look in your browser cache too.
Setting the TTL (time to live) on the files can work
around that to some extent.

To get around people who've somehow managed to
get the URL of the mp3 file from then going ahead
and downloading it by putting the address into their
browser directly, or into a download manager, is to
setup the server properly. It would need to not allow
http requests to the mp3 files unless the REFERRER
is your domain. This is what automatically happens
when your web page requests your mp3 file. Built into
the request is REFERRER=yourdomain. Anyone who
got the URL and tried to use it directly would fail that
request. Beware, there are IE6/IE7 issues here. I think
one of them has referrer issues where it's set wrong
sometimes.

A more expensive solution is to have an embedded
player in the web page and to stream to it. Anyone
with TotalRecorder can just record the sound playing
on their PC anyway (using the record "what you hear"
option). I imagine myspace does this but I haven't
looked into it.

Even if you do all this, it won't stop the copyright
owners of the mp3 (if that's not you) being annoyed
that you're airing their content without permission
and making it possible (even if difficult) for it to be
stolen.

Fading effect between play and play-over and pause and pause-over	0	Oct 16, 2021
How can I add arrows to my FAQ	0	Aug 9, 2023
How to position the tooltip comment on these buttons?	9	Nov 4, 2023
Image shifts to the right when export the page to pdf	4	May 5, 2023
My sliding panel in React Js with graphs on it renders nothing but a blank screen--need help	0	Dec 9, 2019
Can someone tell me if this a real tracker? Or is it one designed to show you a different message at certain times, ie. acting like one?	0	Jan 10, 2021
Uncaught ReferenceError: item is not defined at HTMLButtonElement.onclick in the: <button onclick="item.inserir()">Inserir dados</button>	1	Apr 22, 2023
Need help with code on website (noob)	2	Jul 18, 2022

how can you allow a mp3 to play but make it hard to steal it off of the server ?

surf

dd

Ask a Question

Similar Threads

Members online

Forum statistics

Latest Threads