I used the below tricks:
First, I disabled the right click in order to prevent the user from using save as or get link using this HTML5:
<body oncontextmenu="return false;">
</body>
Second: I used the controlsList="nodownload" but the problem it works fine ONLY in Chrome 58+ as per this, later on I may consider customs control as shown here
<video width="512" height="380" controls controlsList="nodownload"
poster="https://archive.org/download/WebmVp8Vorbis/webmvp8.gif" >
<source src="videos/289522.mp4" type="video/mp4">
<source src="videos/289522.ogv" type="video/ogg">
<source src="videos/289522.webm" type="video/webm">
Your browser doesn't support HTML5 video tag.
</video>
I still need to prevent the user from downloading it in case he got the link by other means, I found some talks about using .htaccess, so I created one inside the videos folder, and tried this:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^http://my.domain.com/.*$ [NC]
RewriteCond %{HTTP_REFERER} !^http://www.my.domain.com/.*$ [NC]
RewriteRule .(mp4|mp3|avi)$ - [F]`
and used as an alternate way, this:
<Files "reminder.php">
Order Deny,Allow
Deny from all
Allow from http://my.domain.com/
Allow from http://my.domain.com/
</Files>
But what happened is video had been blocked completely, even from my website itself, and I started getting this error:
GET http://my.domain.com/videos/289522.mp4 500 (Internal Server Error)