Page 1 of 1

How to disable external login page

PostPosted: Tue Dec 13, 2011 3:00 pm
by matka
I'm running Subsonic for a while and my client is an Android device.
I have setup a new router lately and forwarded the 4040 port. My client can connect to the server and plays my content.
However, I just noticed that I can also http login to the server remotely via the forwarded port.
For security purposes, I would like to disable the remote access to the login page, but still retain the ability to stream content.
I have looked for a separate "streaming" port but did not find anything.
Can I disable remote http access and still stream music ?

Thanks; George

Re: How to disable external login page

PostPosted: Tue Dec 13, 2011 5:46 pm
by BKKKPewsey
If you rename your login.jsp file to say login.jsp.old that will prevent the login page from being displayed.
(You get a 404 error)
However you can still log on by bypassing the login page by passing your user name and password directly as parameters
eg
Code: Select all
yourname.subsonic.org/login.view?user=yourname&password=yourpassword


This may go way to what you are trying to achieve.
:mrgreen:

Re: How to disable external login page

PostPosted: Tue Dec 13, 2011 6:18 pm
by matka
Thanks for the tip, I will try asap.

One more question so I understand how this works.

Does the forwarded port serves both http requests and streams media as well ? Is there a way to separate the two ?
Also, when client receives data about folders, files, etc..., is this done via http requests ?