Media Management is a great way to sell and display digital media (for example, music and video) inside your MINDBODY system. Unfortunately, an extremely savvy client could figure out how to continue using the media long after their series had expired.
But there is a great way to secure your media using what we call a handshake link. But to use this feature, you'll need to 1) host the media on your own server and 2) have access to someone with strong web development skills.
The first step is to create your handshake file. The purpose of this file is to generate a unique id or random number that MINDBODY can use to prevent users from accessing the media link directly. MINDBODY suggests creating a random global user id (guid) and inserting it into a database or file on your server whenever this page is accessed, along with any other information you would like to track (like a timestamp and a 'time to live' for the guid). The handshake file should output this guid only, as plain text.
Next, put the URL of the handshake file on your server (example: http://mywebsite.com/handshake.php). If you have entered a handshake URL, your MINDBODY system will check this page whenever a media link is clicked. Here is the process that will occur:
- A user clicks on a media link with the stored URL of: 'http://mywebsite.com/showMyMedia.php'.
- Your MINDBODY system first calls the handshake URL, which returns a guid ('123456' for this example).
- Your MINDBODY system will then call the following URL: http://mywebsite.com/showMyMedia.php?memid=789&guid=123456
The URL of the media link returns two querystring variables: 'memid' which is the RSSID of the consumer that clicked on the media link (0 if it was a staff member) , and 'guid' which is the guid that was received from the handshake URL. With this information, the media link URL on your server can then validate the guid and grant access to the content.
This secure handshaking between your MINDBODY system and the server hosting the media does two things: One, it forces clients to view media inside your MINDBODY system. Two, it doesn't allow them to copy links and reuse them later. Using a timestamp and a 'time to live' on your server would ensure that there is no way for clients to reuse a media link after guid's lifetime has expired.
Where to enter the link to your handshake page:
- Toolbox => Setup => Options => General Setup & Options => Media Handshake URL Separating AutoPays that Were Made for Payment Plans