├── LICENSE
├── README.md
├── index.php
├── small.mp4
├── tested_chrome.png
├── tested_safari.png
├── video.php
└── wrapper.php


/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2019 Chitpong Wuttanan
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Prevent user download video from browser (HTML5, PHP)
 2 | 
 3 | Tested on Chrome 102.0.5005.61 (Official Build) (x86_64), Safari  15.4 (17613.1.17.1.13)
 4 | 
 5 | ![Chrome](tested_chrome.png)
 6 | 
 7 | ![Safari](tested_safari.png)
 8 | 
 9 | ## Prequisition
10 | - PHP 8
11 | 
12 | ## How to use
13 |  - Download this code and extract all files
14 |  - Open index.php
15 | 
16 | ### License
17 | MIT License.
18 | 
19 | ### Original from
20 | 
21 | - [Defa-Protector-Protect-HTML5-Video-From-Download](https://sourceforge.net/projects/defaprotecthtml5videodownload/files/latest/download) Made with Love From Juthawong Naisanguansee , Bangkok - Thailand http://www.ampareengine.com
22 | 
23 | ### Solution from
24 | 
25 | - [Han Lin Yap - gist:3906826](https://gist.github.com/codler/3906826)


--------------------------------------------------------------------------------
/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | include('wrapper.php');
3 | ?>
4 | <video loop controls='true' type='video/mp4' preload="auto" src='small.mp4'></video>


--------------------------------------------------------------------------------
/small.mp4:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ifew/php-prevent-video-download/610f0380c8d77f79f510466fd3dbbaee7b9e3f29/small.mp4


--------------------------------------------------------------------------------
/tested_chrome.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ifew/php-prevent-video-download/610f0380c8d77f79f510466fd3dbbaee7b9e3f29/tested_chrome.png


--------------------------------------------------------------------------------
/tested_safari.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ifew/php-prevent-video-download/610f0380c8d77f79f510466fd3dbbaee7b9e3f29/tested_safari.png


--------------------------------------------------------------------------------
/video.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | if (session_status() == PHP_SESSION_NONE) {
 3 |     session_start();
 4 | }
 5 | ob_start();
 6 | $crc = filter_var($_GET['crc']);
 7 | $file = $_SESSION['defaprotect' . $crc];
 8 | if ($headerurl = @get_headers($file, 1)['Location']) {
 9 |     if (!empty($headerurl)) {
10 |         $file = $headerurl;
11 |     }
12 | 
13 | }
14 | $size   = filesize($file); // File size
15 | $length = $size;           // Content length
16 | $start  = 0;               // Start byte
17 | $end    = $size - 1;       // End byte
18 | $fp = @fopen($file, 'rb');
19 | 
20 | header('Content-type: video/mp4');
21 | header("Accept-Ranges: 0-$length");
22 | if (isset($_SERVER['HTTP_RANGE'])) {
23 |     if (isset($_SERVER['HTTP_RANGE'])) {
24 |         $c_start = $start;
25 |         $c_end   = $end;
26 |         list(, $range) = explode('=', $_SERVER['HTTP_RANGE'], 2);
27 |         if (strpos($range, ',') !== false) {
28 |             header('HTTP/1.1 416 Requested Range Not Satisfiable');
29 |             header("Content-Range: bytes $start-$end/$size");
30 |             exit;
31 |         }
32 |         if ($range == '-') {
33 |             $c_start = $size - substr($range, 1);
34 |         }else{
35 |             $range  = explode('-', $range);
36 |             $c_start = $range[0];
37 |             $c_end   = (isset($range[1]) && is_numeric($range[1])) ? $range[1] : $size;
38 |         }
39 |         $c_end = ($c_end > $end) ? $end : $c_end;
40 |         if ($c_start > $c_end || $c_start > $size - 1 || $c_end >= $size) {
41 |             header('HTTP/1.1 416 Requested Range Not Satisfiable');
42 |             header("Content-Range: bytes $start-$end/$size");
43 |             exit;
44 |         }
45 |         $start  = $c_start;
46 |         $end    = $c_end;
47 |         $length = $end - $start + 1;
48 |         fseek($fp, $start);
49 |         header('HTTP/1.1 206 Partial Content');
50 |     }
51 |     header("Content-Range: bytes $start-$end/$size");
52 |     header("Content-Length: ".$length);
53 | 
54 |     $opts['http']['header'] = "Range: bytes=" . ($start-$end)/$size . ",
55 |     Content-Type: video/mp4,
56 |     Accept-Ranges: bytes,
57 |     Content-Disposition: inline;,
58 |     Content-Transfer-Encoding: binary\n,".
59 |     "Connection: close";
60 | 
61 |     $opts['http']['method'] = "GET";
62 |     $cong = stream_context_create($opts);
63 |     ob_end_clean();
64 |     
65 |     readfile($file, false, $cong);
66 |     
67 |     exit();
68 | }
69 | 


--------------------------------------------------------------------------------
/wrapper.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | if (session_status() == PHP_SESSION_NONE) {
 3 |     session_start();
 4 | }
 5 | ob_start(function($output){
 6 |     if( (strpos($output,"<video") > -1 || strpos($output,"<audio") > -1  || strpos($output,"<source") > -1 )  && (strpos($output,"<safe") == FALSE) ){
 7 |     //Check If There is Video On The Page Then Load Defa Protector
 8 |     // Source Tag Validation isn't need but for safety 
 9 |     //If HTML Contains Safe Tag, Then Not Load Defa Protector
10 |         function getURL($matches)
11 |         {
12 |             $crc = substr(sha1($matches['2']), -8, -1);
13 |             $_SESSION['defaprotect' . $crc] = $matches['2'];
14 |             return $matches[1] . "/video.php?crc=".$crc;
15 |         }
16 |         //Super Ugly But Works Better
17 |         $output = preg_replace_callback("/(<video[^>]*src *= *[\"']?)([^\"']*)/i", "getURL", $output);
18 |         $output = preg_replace_callback("/(<source[^>]*src *= *[\"']?)([^\"']*)/i", "getURL", $output);
19 |         $output = preg_replace_callback("/(<audio[^>]*src *= *[\"']?)([^\"']*)/i", "getURL", $output);
20 |     }
21 |     return $output;
22 | });
23 | 
24 | 


--------------------------------------------------------------------------------