Stronger hotlink protection checks that ts encryption key and m3u8 requests use the same IP; dynamic segment-ad skipping added

We have strengthened developer hotlink protection again. The plus version already limited requests and expiry timestamps for m3u8 and key files. This update adds another check: access to the key and m3u8 must use the same IP, otherwise the response is 403. Administration can also show or hide dynamic ts pre-roll and mid-roll ads for individual videos.

Changelog

• One: Hotlink protection now verifies that key and m3u8 requests come from the same IP. Different IP addresses receive 403. Combined with play-count limits and timestamp expiry, it can achieve approximately 99.96% hotlink and download protection.
• Two: Added per-video customization when replaceable TS ads are enabled. Show or hide pre-roll and mid-roll ads for selected videos, allowing ads to be skipped for resolutions with compatibility issues.

Statement

I recently saw another software author criticizing us again in his group and on his website. I usually pay little attention—he can say what he wants in his own group—but his indiscriminate attacks are almost laughable. Please judge carefully. I will state this only once because I have no time for such matters: several new projects are in development, including one with a million records. Unlike a certain website whose few updates are surrounded by attacks, I focus on development. Reproducing that entire program would take me at most a month, but it is unnecessary.

Occam's razor: do not multiply entities beyond necessity. Let us keep that in mind.