/songs folder permissions

0
I noticed that if I access my site /songs I have full access to all the songs

I would like to have this locked down so people cannot access and download all the songs

Please help
Responses (4)
  • Accepted Answer

    Friday, January 06 2012, 04:51 PM - #Permalink
    0
    you can't. if you lock it down, then it will be locked down to everybody, INCLUDING the player, which won't be able to play the songs! do you know what I mean?
    The reply is currently minimized Show
  • Accepted Answer

    greengeek
    greengeek
    Offline
    Saturday, January 07 2012, 03:21 AM - #Permalink
    0
    Also make sure you have directory browsing disabled on your webserver. That way a user can not just type in the /songs path and see a full list of all your files and start clicking on them to download them. They would actually have to know the full path and file names. I would suggests doing this on any website, as it can be a security issue listing all the file contents of your folders.

    This can be done by editing your .htaccess file or a simple change in the apache config file. If you do not have access to either of these, you could always just put a default webpage in each directory, such as an empty index.htm that will load instead of displaying a file listing of what is within that folder.

    I have requested a way around this before, and am hoping at some point Germi may be able to set up MC to allow the music to be stored outside of the web path and use aliases that are stored in the database to prevent direct linking or exposing ones music directly to the web.
    The reply is currently minimized Show
  • Accepted Answer

    greengeek
    greengeek
    Offline
    Saturday, January 07 2012, 03:35 AM - #Permalink
    0
    I just took a look at your site and it appears you have directory browsing turned on. That is why a user can just type the full url with the songs folder in the address bar of their browser to see all the songs you have available.

    Here is a good reference on how to disable directory browsing:

    http://www.techiecorner.com/106/how-to-disable-directory-browsing-using-htaccess-apache-web-server/

    It lists a few different ways how to do it, you only need to choose one.
    The reply is currently minimized Show
  • Accepted Answer

    Saturday, January 07 2012, 03:55 AM - #Permalink
    0
    Wow I did not know this thanks a million!!

    http://stagedavid.com/songs ;)
    The reply is currently minimized Show
Your Reply