Only accept width/height params if the STREAM_SECRET matches

stream-server.js

@@ -48,10 +48,11 @@ socketServer.broadcast = function(data, opts) {
 // HTTP Server to accept incomming MPEG Stream
 var streamServer = require('http').createServer( function(request, response) {
 	var params = request.url.substr(1).split('/');
-	width = (params[1] || 320)|0;
-	height = (params[2] || 240)|0;
 
 	if( params[0] == STREAM_SECRET ) {
+		width = (params[1] || 320)|0;
+		height = (params[2] || 240)|0;
+		
 		console.log(
 			'Stream Connected: ' + request.socket.remoteAddress + 
 			':' + request.socket.remotePort + ' size: ' + width + 'x' + height