Protecting pay videos in public file system
| Project: | FlashVideo |
| Version: | 5.x-2.7 |
| Component: | User interface |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed |
Jump to:
I have a site where I will have some premium videos that will be accessed via payment. Thus, I will have them in a private area. I have installed the private_upload module that allows me to have public and private files altogether. Flash videos in the public area work nicely, but the ones in the private area aren't displayed. I suspect it has to do with private_upload redefining file_create_url into _private_upload_create_url. I have tried to arrange things without success, so I come here asking for some hele from an expert.
Perhaps I should try some other module, like premium, but the payment and such thins are already correct, I only need that the videos can be displayed using this mixed file system. I hope someone can suggest me some kind of solution.

#1
By the way, before installing private_upload I was using private file system and the player worked ok, I created the dummy node with the player attached to it. But now, after installing private upload, there seems to be some kind of problem. The player is seen but the private movie is never loaded. And the fact is that if I write the movie address in the browser, http://myweb/system/files/private/video.flv, it is downloaded correctly. It doesn't seem a private_upload problem but a flashvideo problem.
I have also tried creating a dummy file with the player attached and also copying the player in the public file system. The player is seen, it is the movie that isn't downloaded.
#2
I have changed the title, because in fact this is my problem. I find flashvideo an adequate module, it works ok, but I need that my video files are not downloadable from their url even if a public file system is being used (private file system is too slow). One option I tried was private_upload, but perhaps someone has another suggestion...
#3
You can set your file system to private, and then create a dummy node with your player. You basically create a non published node and attach the video player to that node and submit it... then you can have private files.
#4
I think a better idea would to store your videos videos out of the htdocs root directory since i've been told even private files isn't private?
will this work and how would the video player stream content outside of the webroot?
Maybe, another method is to use Amazon S3 to store your videos privately?
thanks,
#5
@travist: Setting file system to private is not adequate because it slows down everything. That's why I tried the private_upload module. This module creates a protected private directory inside files, this permitting a mixed private and public filesystem. I already tried this dummy node method but I had to change to a public file system for speed reasons.
@duvien: yes, private file system is not private, the name is wrongly chosen. With private_upload part of the job is done. If you can't access a node, you can't access it's uploaded files.
Is it possible that flashvideo works with this mixed public and private file system? I think it should be quite an easy task.
#6
Solved:
http://drupal.org/node/235667
#7
Automatically closed -- issue fixed for two weeks with no activity.