session_start();
$token = $_GET['token'] ?? '';
if (!isset($_SESSION['video_tokens'][$token])) exit('Invalid token');

$url = $_SESSION['video_tokens'][$token]['url'];
header("Location: $url");
exit;