Installation and server related problems

Hi,

I am using H5P on Drupal 7,8 and 9. 

Is there anyway to prevent the H5P content being viewed by anonymous user using the following URLs with the embed:
For example: www.domain.com/h5p/embed/8626

I know this might be a question for Drupal, but I guess also Wordpress is using iframe for showing content?

This way anyone can see the content because it is just the H5P scripts. Has anyone been able to limit the visibility of these embed urls?

I can not upload a file to h5p :(

(500)

Unable to interpret response.
Please check your error log.

Steps to recreate.

Vist https://h5p.org/presentation click reuse and download .h5p
With moodle or wordpress (two different websites)
Select h5p -> Upload downloaded .h5p file. Wait for error