can i integrate player into my website ?

Posted:
Sun Mar 29, 2020 7:41 am
by ecko
can i integrate player into my website ?
and arrange music from my control panel ?
Re: can i integrate player into my website ?

Posted:
Sun Mar 29, 2020 9:34 am
by 3Dscrewer
I'm not shure, but if you have programming experience it should be possible using the Subsonic API. The Subfire Suit is doing imho something like that.
May be you can frame it ...
http://subfireplayer.net/Subsonic Api Information
http://www.subsonic.org/pages/api.jsp
Re: can i integrate player into my website ?

Posted:
Tue Mar 31, 2020 12:01 am
by acroyear
I have once before packaged subfire as a .zip for distribution on request. I prefer not to, but it is possible. There are some security concerns if you were to try to set it up so it had direct access to your server's collection. I'll talk about that later when i have the time (But gotta cook dinner)
Re: can i integrate player into my website ?

Posted:
Tue Mar 31, 2020 12:22 am
by acroyear
Basically, the concern is that the protocol, even encoded, is still inherently insecure. The API has a token+seed mechanism to hide a password, but the token and the seed both come from the API call, so anybody looking at the network traffic can just grab a token and seed and get access to your subsonic. No, they can't get to the main console, but they can do anything the API (and user protections) allow.
So even if the token and seed were generated by a php script behind the scenes, they could still be grabbed. To do it optimally, each time a user connected, the php script (which could have an admin login securely; this can be a node script as well) would have to create a user and then serve up the player code with that user's token/seed, and at regular intervals another script you could run would purge any of those generated users every few hours or every day. The users generated would have no access to anything but browsing and streaming (no downloads, no chat, no admin roles at all, no ability to create a playlist).
So yeah, the idea has come to mind about using a server+subfire client setup to make a temporary browsable share of stuff, but i haven't quite gotten to the point of wanting to actually write it out or publish it as such. (one issue is that for php, the constant change of php versions, always incompatible with each other, means that i have to have multiple versions to maintain. node is less an issue but fewer people can just drop that on the fly).
(note, that subfireplayer.net is not the only player I maintain now. see the subfiresuite in my .sig for the newer players.)