hiding xml from public direct access

so my question is how do i prevent public access to an xml file on my server..

i have a website which allows users to listen 开发者_运维百科to music online but you can't download... the music is in a flash player reading off an xml file..

the playlist for example will be named playlist.xml

how do i prevent the public to directly accessing the xml file if found via "view source" ?

is this possible if so how do i change settings?

You can't. The Flash client, running on the user's computer, has to be able to access the file. If it can access the file, then anything else running on the user's computer can too.

You could try adding in extra required HTTP headers (by editing the Flash player) but that is not difficult to bypass.