Hotlink Protection Subverted by Embedding?

[digitald]

My web host provides an easy app that provides hotlink protection. I use it to keep others from linking to my videos and launching them from their sites. I included both the video extensions and the metafile extension and I've tested them -- they work. If you click the link that somebody includes on their web page to my videos, it will instead launch my web site.

But I found someone who had embedded the meta file link to my videos in their page. And that code launches my videos with no problem. Does hotlink protection only work for links to launch an external player, and not for videos embedded in a web page?

[hartken]

I don't know if this will help, but I wrote a php script for images that verified that the request was coming from the server. It used either IP address or a password as the authenitcation. If it passed it outputted the header type for the image. If it didn't it displayed a "view original content at this domain:". To link the pages you simply refered to the php script, and the image file was nested deep where no one could find it. I don't know if you can output headers to declare a video file though.

[digitald]

I don't know either. I'm not much of a php expert, and I'm not sure what you mean by header types. I'm pretty green with php. But can you share a li'l more about what you did? Maybe I can try it. Thanks.