Download Url Token Question

[JoeGamers]

Houston, we have a problem
I see that you can easily extract the url from the videos with the Google Chrome developer tool, how we can prevent them from extracting these links from our servers:
https://fhscript.com/zXT/Batman_v_Superman_Dawn_of_Justice_-_Comic-Con_Trailer_[HD].mp4?download_token=4fd8b3900a46e47f9fdcf87a7f5aadcedff5bdb0cc1657333e0080d67a3042f1


Is this touch fixed or does it change from time to time?

 

[adam]

Ignore my last post, I see this is in presales.

These token links only last for 24 hours, so they won't work after then.

In addition, there's also an option in the code to limit them by IP if you'd prefer. The only restriction is that the document viewer plugin doesn't yet work in the IP restricted mode. (as it uses Google to view the documents and the IP from Google changes)

Thanks,
Adam.

 

[JoeGamers]

¿Significa que puedo asignar un token para cada IP y evitar así el problema de la pérdida de enlaces y recursos?
¿Puedo cambiar la cantidad de horas de caducidad de cada grifo?

 

[adam]

Yes to both

 

[JoeGamers]

Perfect

 

[JoeGamers]

Can you tell me in which part of the demo panel can I verify it?

 

[adam]

It's in the code, you need to uncomment a line in the code to enable it.

 

[JoeGamers]

Hello, can you tell me where I decompose the line to configure this

 

[adam]

Have a look in:

/core/includes/file.class.php

Search for:

// check token

You'll see:

// $tokenData = $db->getRow('SELECT id, user_id, ip_address, file_id, download_speed, max_threads, file_transfer FROM download_token WHERE file_id = ' . $db->escape($this->id) . ' AND ip_address=' . $db->quote(coreFunctions::getUsersIPAddress()) . ' AND token = ' . $db->quote($downloadToken) . ' LIMIT 1');
$tokenData = $db->getRow('SELECT id, user_id, ip_address, file_id, download_speed, max_threads, file_transfer FROM download_token WHERE file_id = ' . $db->escape($this->id) . ' AND  token = ' . $db->quote($downloadToken) . ' LIMIT 1');

Uncomment the first line and comment out (or remove) the second. This will restrict the download by IP address.

Thanks,
Adam.

 

[yametesenpai]

Have a look in:

/core/includes/file.class.php

Search for:

// check token

You'll see:

// $tokenData = $db->getRow('SELECT id, user_id, ip_address, file_id, download_speed, max_threads, file_transfer FROM download_token WHERE file_id = ' . $db->escape($this->id) . ' AND ip_address=' . $db->quote(coreFunctions::getUsersIPAddress()) . ' AND token = ' . $db->quote($downloadToken) . ' LIMIT 1');
$tokenData = $db->getRow('SELECT id, user_id, ip_address, file_id, download_speed, max_threads, file_transfer FROM download_token WHERE file_id = ' . $db->escape($this->id) . ' AND  token = ' . $db->quote($downloadToken) . ' LIMIT 1');

Uncomment the first line and comment out (or remove) the second. This will restrict the download by IP address.

Thanks,
Adam.

how can i store the ip for 5 minutes? 1 day storation is too long. users might cheat

 

[adam]

You can't without changing the code. If a download manager requests another chunk after 5 minutes, it'll break it.