Prohibit downloading unpublished sermons

Dear Thomas,

I find someone is leeching my audios by exploiting the serially numbered sermons. They go:
http://mysite/menuitem/download/audio/101-
http://mysite/menuitem/download/audio/102-
http://mysite/menuitem/download/audio/103-
And they could download audios that are not yet published.
I see relevant code is at:
github.com/Bakual/SermonSpeaker/blob/216...roller.php#L137-L144
It does not check sermon's publishing status.
I appended this to the query to limit the search result to those I want the public to access:
$query = $query . " AND state = 1 AND UTC_TIMESTAMP > publish_up";
$query = $query . " AND (publish_down = '0000-00-00 00:00:00' OR UTC_TIMESTAMP < publish_down)";
Do you think it is good?

Best Regards,
Ken

Yep, that should work.
I can have a look at including a similar check in future version.

I've fixed it with this commit: github.com/Bakual/SermonSpeaker/commit/2...8c294d852527eda7ff4b

You can download the file here: raw.githubusercontent.com/Bakual/SermonS.../site/controller.php and replace yours with it.