Update app.py

app.py

@@ -5,7 +5,7 @@ import time
 import asyncio
 from typing import Dict
 import base64
-import hashlib
+import secrets
 
 app = FastAPI()
 
@@ -910,7 +910,10 @@ async def embed_video(url: str, thumbnail: str):
 @app.get("/encrypted/{encrypted_url}")
 async def handle_encrypted_url(encrypted_url: str, request: Request):
     decrypted_url = decrypt_url(encrypted_url)
-    return await handle_video_stream(decrypted_url.split('/pbxt/')[1], request)
+    if '/pbxt/' not in decrypted_url:
+        return JSONResponse(content={"error": "Invalid encrypted URL"}, status_code=400)
+    path = decrypted_url.split('/pbxt/')[1]
+    return await handle_video_stream(path, request)
 
 async def get_cookies() -> Dict[str, str]:
     try:
@@ -963,11 +966,24 @@ async def retry_upload(upload_url: str, file_content: bytes, content_type: str,
             print(f"Error during upload: {e}")
         
         await asyncio.sleep(delay)
-        delay = min(delay * 2, 60)
+        delay = min(delay * 2, 60)  # Exponential backoff, capped at 60 seconds
     
     return False
 
+# Generate a secure secret key
+SECRET_KEY = secrets.token_urlsafe(32)
+
+def encrypt_url(url: str) -> str:
+    encoded = base64.urlsafe_b64encode(url.encode()).decode()
+    return encoded[::-1]  # Simple reversal for obfuscation
+
 def decrypt_url(encrypted_url: str) -> str:
-    key = '875843758RR'
-    decoded_url = base64.b64decode(encrypted_url[::-1]).decode('utf-8')
-    return decoded_url
+    try:
+        decoded = base64.urlsafe_b64decode(encrypted_url[::-1]).decode()
+        return decoded
+    except:
+        return ""
+
+if __name__ == "__main__":
+    import uvicorn
+    uvicorn.run(app, host="0.0.0.0", port=7820)