in reply to How to assure security in the lighttpd (lighty) for a video streaming ?

This will not be secure at all if you are using auto-increment or similar to generate the IDs for your videos.

What you could do instead (which isn't totally secure, but more-so at least), is use Data::UUID and Digest::SHA1.

After the video has been accessed, generate a random UUID, then run it through sha1 to make it prettier. Then just rename the video to the sha1 value you got.

  • Comment on Re: How to assure security in the lighttpd (lighty) for a video streaming ?

In Section Seekers of Perl Wisdom