Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-08-09 Thread Alex Bligh
--On 29 June 2012 15:08:44 +0100 Alex Bligh wrote: You have talked about perl and mod_perl. I understand that you can override htaccess to use a self-made bit of Perl code that process it and check the token. Is this right? You don't need to override htaccess. Here's a piece of perl found

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Alex Bligh
Daniel, --On 29 June 2012 14:04:01 +0200 Daniel Merino wrote: You have talked about perl and mod_perl. I understand that you can override htaccess to use a self-made bit of Perl code that process it and check the token. Is this right? You don't need to override htaccess. Here's a piece of

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Daniel Merino
Hi, Alex. Having that Apache is serving the file and that we want only to protect several files placed on a specifical folder, your suggestion of adding some token to URLs pointing at that folder, and make Apache to deliver them, seems to be a good solution. You have talked about perl and mo

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Alex Bligh
Daniel, --On 29 June 2012 10:38:24 +0200 Daniel Merino wrote: I'm not sure to understand at all this approach, but anyway, I think that will not be valid for us. Drupal's restricted access to the video works fine, but in the moment that some authorized user can see the video, he can see the

Re: [users@httpd] Secure htaccess in a non-SSL Apache (and withoutDigest...)

2012-06-29 Thread Daniel Merino
Hi, Alex, and thanks for that quick answer. I'm not sure to understand at all this approach, but anyway, I think that will not be valid for us. Drupal's restricted access to the video works fine, but in the moment that some authorized user can see the video, he can see the video's URL in the