Is there something like mod_secdownload (which is available for lighttpd) also available for Apache 2.x?

The mod provides expiring URLs, so that it is possible to prevent hotlinking of files. A similar feature is used by Amazon S3.

The server application has to generate a hash with a secret code and an expiry timestamp so that URLs only live for a given duration of time.

The closest thing I could find is mod_auth_token, but that seems to be Apache 1.3 only.


Additional Hints:

  • As suggested by HD: mod_auth_token works great with Apache 2.x
  • If you need some hints on how to use it: Info Page at nixbit.com
link|improve this question

64% accept rate
feedback

1 Answer

up vote 2 down vote accepted
+100

Are you sure that mod_auth_token doesn't work with Apache2? I compiled the module with apache2-devel and also I see some apache2-mod_auth_token rpm packages in rpm.pbone.net

link|improve this answer
Seems to actually work. Thought it was only Apache 1.x because I can't find absolutely NO documentation about it. Any hints? How do I use it? – BlaM Sep 27 '09 at 10:57
Great! It works! jump happy – BlaM Sep 27 '09 at 11:09
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.