Question

I want to redirect clients requesting the file ‘/File.mp3’ to a PHP script that will verify the user. Then, if the script responds ‘TRUE’, I want to redirect the client to download the file.

How can I do this with PHP and Apache?

Answer 1

RewriteEngine on

RewriteRule ^(.*).mp3$ /mp3_file.php?file=$1

Please note this is very easy to hack:

http://localhost//etc/passwd%00.mp3
[audio src="http://localhost/config.php%00.mp3" /]

AFAIK, you can safely load the file using the following:

$data = file_get_contents('your_mp3_dir/'.basename(str_replace("\0", "", $_REQUEST['file'])).'.mp3');