Forum Moderators: phranque
Welcome to WebmasterWorld!
The problem is that the players such as Windows Media Player do not provide an HTTP Referer header in their requests. Therefore, any access control based on HTTP_REFERER will fail.
Also, the best you can hope for is that "protecting" your MP3 files means they won't be [i]easy[i] to hotlink to, but that doesn't mean they can't be stolen. Once someone "plays" an MP3, it is in their computer, and can easily be found and saved locally.
You best bet is to write or get a script that sets and checks cookies before allowing access to the pages where your mp3 files are accessible. The script itself should serve the files, which can be placed out of the HTTP-accessible filespace of the server. But these files, once served, can still be saved on the user's computer.
Past that simple level of protection, you'll need to use a streaming media server to actually prevent copies.
Jim
[yourdomain.com...]
[yourdomain.com...]
and not
[yourdomain.com...]