mod_auth_token is a apache module that can be used to sign URLs, using this it can create time based urls that expire after a certain amount of time. It will prevent hot linking as the URLs will expire. This is particularly useful with video and image sharing.<\/p>\n
To get started you will need to have an Apache installation already present. If you need to set this up please set Compile Apache 2.4 From Source<\/a>.<\/p>\n First ssh into the server and get the required packages:<\/p>\n cd \/usr\/src; wget https:\/\/storage.googleapis.com\/google-code-archive-downloads\/v2\/code.google.com\/mod-auth-token\/mod_auth_token-1.0.5.tar.gz<\/p>\n Un-compress the archive:<\/p>\n tar xfvz mod_auth_token-1.0.5.tar.gz<\/p>\n Go into the directory<\/p>\n cd mod_auth_token-1.0.5<\/p>\n Configure it:<\/p>\n .\/buildconf && .\/configure<\/p>\n Install It:<\/p>\n make && make install<\/p>\n Restart Apache to make sure it loads without a error:<\/p>\n service httpd restart<\/p>\n Make sure the module is loaded:<\/p>\n # httpd -M 2>&1|grep auth_token You should see auth_token_module in the results<\/p>\n You will need to edit the apache configuration and add the following to the domain you want protected by mod_auth_token:<\/p>\n <Location \/download\/> Restart Apache again:<\/p>\n service httpd restart<\/p>\n To test that it is working create a php file to generate a URL<\/p>\n <?PHP<\/p>\n $secret = “randomstring”; \/\/ AuthTokenSecret $token = md5($secret . $filename. $hexTime);<\/p>\n $url = $domainname . $protectedPath . $token. “\/” . $hexTime . $filename; ?><\/p>\n Go ahead and run that php script and it will output the URL, if you are able to access it. The module is working correctly. You can read more about mod_auth_token on code.google.com<\/a><\/p>\nInstall mod_auth_token:<\/h3>\n
\nauth_token_module (shared)<\/p>\nConfigure Apache for mod_auth_token<\/h3>\n
\n# Secret key, can be anything random
\nAuthTokenSecret “randomstring”
\n# directory to protect
\nAuthTokenPrefix \/protected\/
\n# Timeout length, this is in seconds
\nAuthTokenTimeout 300
\n# limit requsts by IP
\nAuthTokenLimitByIp off
\n<\/Location><\/p>\n
\n$directory = “\/[protected\/”; \/\/ AuthTokenPrefix
\n$hexTime = dechex(time()); \/\/ Time in Hexadecimal
\n$url = “http:\/\/www.example.com”; \/\/ Replace this with the domain
\n$filename = “\/$filename”; \/\/ Filename<\/p>\n
\nprint $url;<\/p>\n