I'm doing your average .htaccess password protect directory rules. And they're working just fine showing the login prompt when trying to access the directory and html files within. But when you try to directly access a .mp3 file within that directory, it steams it just fine without asking for a login. Any way to make it so it also brings up the login prompt for mp3's also instead of directly streaming them? And yes, I tried doing a file protect on a specific mp3, it's still allowing it to go through, as if mp3's are impervious to password protection. Thanks.
I've experienced something like this before. What I'd suggest is to mod_rewrite the mp3 file to look as though it's a php file - and see if that works ... so musicfile.mp3 redirects to musicfile.php? Doing that, you can also have the index page of your protected directory a Landing Page that'll show links to the mp3 they want... or, have the index page show the link to the file depending on the refer ... I hope that makes sense, if it doesn't reply and I'll try to help you out a bit more! All the best, Lynn.