Luke,
the problem is that when you use windows media player, it doesnt send the referring URL, so your htacces (mod_rewrite?) code won't work, because your referring URL is blank.
Another solution, is the one colette mentioned. The trick here though is to change the username and password every 5-10 minutes using a script, you could write one in PHP (or have it done for you). That way if your username/password got handed out, its only good for 10 minutes.
The only final way to do it, is the way we do it, and sorry I can't devulge that yet! It's still experimental, but seems to get around all current problems with the type of security needed here. Of course its also harder to implement.
Hope it helps!
__________________
<table border=0 cellspacing=0 cellpadding=2><tr><td valign=top><a href=http://www.xamo.com>
</a></td><td valign=top>
Michael Brown
President, Xamo Entertainment Inc.
</td></tr></table>
Hybrid Mode
