# about wowzasessionid

**URL:** <https://community.wowza.com/t/about-wowzasessionid/41656>\
**Category:** Wowza Streaming Engine\
**Created:** [December 2, 2013, 1:14am UTC](https://community.wowza.com/t/about-wowzasessionid/41656 "2013-12-02T01:14:31Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![tatiya\_tiansan](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tatiya\_tiansan](https://community.wowza.com/u/tatiya_tiansan)\
**Post date:** [December 2, 2013, 1:14am UTC](https://community.wowza.com/t/about-wowzasessionid/41656/1 "2013-12-02T01:14:31Z")

</div>

i use module

[https://www.wowza.com/docs/how-to-control-access-to-http-streams-cupertinostreaming-sanjosestreaming-smoothstreaming-mpegdashstreaming](https://www.wowza.com/docs/how-to-control-access-to-http-streams-cupertinostreaming-sanjosestreaming-smoothstreaming-mpegdashstreaming)

lock username and password

[http://wowza-ip/live/test.stream/playlist.m3u8?admin,admin](http://wowza-ip/live/test.stream/playlist.m3u8?admin,admin)

save m3u8 then edit

[http://wowza-ip/live/test.stream/playlist.m3u8?wowzasessionid=2874583&admin,admin](http://wowza-ip/live/test.stream/playlist.m3u8?wowzasessionid=2874583&admin,admin)

but

hacker

[http://wowza-ip/live/test.stream/playlist.m3u8?wowzasessionid=2874583](http://wowza-ip/live/test.stream/playlist.m3u8?wowzasessionid=2874583)

played

i want block wowzasessionid ?

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [December 3, 2013, 2:28pm UTC](https://community.wowza.com/t/about-wowzasessionid/41656/2 "2013-12-03T14:28:03Z")

</div>

I’m not sure what you mean by “save m3u8 then edit”, but you can look at and reject a session based on sesssionID in [onHTTPSessionCreate](https://www.wowza.com/docs/how-to-control-access-to-http-streams-cupertinostreaming-sanjosestreaming-smoothstreaming-mpegdashstreaming%28cupertinostreaming-smoothstreaming-sanjosestreaming%29)

```auto
String sessionID = httpSession.getSessionId();

```

Richard

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [December 3, 2013, 3:50pm UTC](https://community.wowza.com/t/about-wowzasessionid/41656/3 "2013-12-03T15:50:22Z")

</div>

You use [onHTTPSessionCreate, as shown in this example](https://www.wowza.com/docs/how-to-control-access-to-http-streams-cupertinostreaming-sanjosestreaming-smoothstreaming-mpegdashstreaming%28cupertinostreaming-smoothstreaming-sanjosestreaming%29)

Richard

---

<div class="post-metadata">

**Author:** ![Chanchai\_Srithep](https://avatars.discourse-cdn.com/v4/letter/c/bc8723/32.png) [@Chanchai\_Srithep](https://community.wowza.com/u/Chanchai_Srithep)\
**Post date:** [January 16, 2014, 11:34am UTC](https://community.wowza.com/t/about-wowzasessionid/41656/4 "2014-01-16T11:34:33Z")

</div>

Richard same i want one session per one ip

> How to if want one session per one ip only?

---

<div class="post-metadata">

**Author:** ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)\
**Post date:** [January 16, 2014, 6:45pm UTC](https://community.wowza.com/t/about-wowzasessionid/41656/5 "2014-01-16T18:45:13Z")

</div>

As far as I am aware, there is nothing built in to handle this.

Salvadore

---

<div class="post-metadata">

**Author:** ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)\
**Post date:** [January 18, 2014, 2:52pm UTC](https://community.wowza.com/t/about-wowzasessionid/41656/6 "2014-01-18T14:52:23Z")

</div>

You can use this module as a strating place for a custom module, and keep track of sessions in a hashmap:

[How to limit playback by IP address](https://www.wowza.com/docs/how-to-limit-playback-by-ip-address-moduleoverrideplayrestrictip)

If you need further help with this implementation you can post to the[find a consultant forum](http://community.wowza.com/c/-/7)

Salvadore

---

<div class="post-metadata">

**Author:** ![tatiya\_tiansan](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tatiya\_tiansan](https://community.wowza.com/u/tatiya_tiansan)\
**Post date:** [December 3, 2013, 7:29am UTC](https://community.wowza.com/t/about-wowzasessionid/41656/7 "2013-12-03T07:29:05Z")

</div>

> I’m not sure what you mean by “save m3u8 then edit”, but you can look at and reject a session based on sesssionID in [onHTTPSessionCreate](https://www.wowza.com/docs/how-to-control-access-to-http-streams-cupertinostreaming-sanjosestreaming-smoothstreaming-mpegdashstreaming%28cupertinostreaming-smoothstreaming-sanjosestreaming%29)
> 
> ```auto
> String sessionID = httpSession.getSessionId();
> 
> ```
> 
> Richard

When I called to check seesion ?

example code ?

Richard

---

<div class="post-metadata">

**Author:** ![tatiya\_tiansan](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tatiya\_tiansan](https://community.wowza.com/u/tatiya_tiansan)\
**Post date:** [December 6, 2013, 3:45am UTC](https://community.wowza.com/t/about-wowzasessionid/41656/8 "2013-12-06T03:45:14Z")

</div>

> You use [onHTTPSessionCreate, as shown in this example](https://www.wowza.com/docs/how-to-control-access-to-http-streams-cupertinostreaming-sanjosestreaming-smoothstreaming-mpegdashstreaming%28cupertinostreaming-smoothstreaming-sanjosestreaming%29)
> 
> Richard

How to if want one session per one ip only?

---

<div class="post-metadata">

**Author:** ![tatiya\_tiansan](https://avatars.discourse-cdn.com/v4/letter/t/d07c76/32.png) [@tatiya\_tiansan](https://community.wowza.com/u/tatiya_tiansan)\
**Post date:** [January 18, 2014, 11:57am UTC](https://community.wowza.com/t/about-wowzasessionid/41656/9 "2014-01-18T11:57:48Z")

</div>

> As far as I am aware, there is nothing built in to handle this.
> 
> Salvadore

How?
