S3 videos protection

Discussion in 'Setting-up protection' started by dave_robins, Mar 31, 2014.

  1. dave_robins

    dave_robins New Member

    Joined:
    Jan 27, 2014
    Messages:
    4
    I have set up some S3 videos and I believe they are correctly in a private bucket as they are not accessible via their Amazon URL.

    They are accessible by members only on my site using Amember as they should be, however a "view source" shows the video url in flowplayer (my site URL not Amazon) that if pasted into a browser does not require any authentication and would allow download of the videos by anyone with that URL.

    Am I missing something?

    Dave
  2. box5productions

    box5productions Tim Snyder

    Joined:
    Mar 8, 2010
    Messages:
    1
    Did you get an answer. This is a pretty major flaw.
  3. caesar

    caesar aMember Pro Developer Staff Member

    Joined:
    Oct 16, 2009
    Messages:
    1,660
    This protection work this way: on each authenticated user access aMember check his permission and in case permission is ok then generate unique access link to amazon file for this user that expire within several minutes.

    This link will expire within several minutes and it is not possible to use it again.

Share This Page