Hi, I have a web site that streams on demand video content. The video content is stored and delivered from a seperate SMD platform. My website submits a url request to the media server in order to get the media to display. My user session data is held in a sql server database on another seperate server. My task is to be able to prevent anybody from hot-linking to our media content and this is where I am trying to come up with a solution.
I think the best way for me to do this is to create a web service that can validate a session id. So when I create the url on my web site I include the encrypted session id. The media server then sends this encrypted token to my web service which in turns decrypts the token and validates the session id against my database and then returns whether valid or not which is used to check if the content can be displayed. Does this seem like a valid plan? Has anyone done something similar?
How would be the best way to check in my database if ...
Go to the complete details ...