[Djsimonsez]

Hi all, just getting the security aspects of my own addon sorted and i wonder if anyone could offer help. Im going to list xml files on my own site, but i want to block access to them apart from kodi and ftp. Im pretty sure this is done with the right information on a htaccess file. but want to be pointed in the right place so i dont mess up

thanks in advance

Simon

[wsnipex]

you can block other User Agents then Kodi, but be aware that this is easily faked and won't hold off anyone really wanting to get those files.

[tadly]

1. ftp != secure. At least use sftp
2. how would kodi "access" those xml files? I assume a add-on would do that?
If that's the case, use username/password and throw ssl on top of it

Oh, if you'r working with static IPs on the client side of things, you could only allow those within your htaccess as well

[zag]

Be aware the kodi has many different user agents though.

[phil65]

Be aware the kodi has many different user agents though.

It would only need to allow the user agent from the add-on which should access that data.