Results 1 to 9 of 9
  1. #1
    Join Date
    Oct 2004
    Location
    Montana
    Posts
    53
    Plugin Contributions
    0

    Download from separate domain?

    Hi All,

    I would like to setup mp3 downloads for one of my sites, but the non-profit hosting environment we use has a rule that mp3 downloads have to come from a special "media" server and not from our web server.

    I tried setting up a product with a download that had a fully qualified URL, but that didn't work, and I am stumped. Is there a way to do this or do I need some custom coding?

    Thx,

    Tim

  2. #2
    Join Date
    Jan 2004
    Posts
    66,380
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: Download from separate domain?

    Needs lotsa custom coding if you want to maintain security...
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  3. #3
    Join Date
    Oct 2004
    Location
    Montana
    Posts
    53
    Plugin Contributions
    0

    Default Re: Download from separate domain?

    Hmmm. By security you mean hiding the URL of the file to be downloaded? Security is maintained now via the browser re-direct?

    So, what you are saying is that it wouldbe difficult to re-direct the browser to a different domain?

    Thx

  4. #4
    Join Date
    Oct 2004
    Location
    Montana
    Posts
    53
    Plugin Contributions
    0

    Default Re: Download from separate domain?

    *Polite Bump* :-)

  5. #5
    Join Date
    Mar 2004
    Posts
    16,042
    Plugin Contributions
    5

    Default Re: Download from separate domain?

    As Dr Byte explained, there would be a good deal of coding to get this to work,
    you might be able to get around this by zipping up the files
    Zen cart PCI compliant Hosting

  6. #6
    Join Date
    Oct 2004
    Location
    Montana
    Posts
    53
    Plugin Contributions
    0

    Default Re: Download from separate domain?

    I am sorry I don't understand. I am hoping to learn how to solve this issue. I don't know where else I could hope to search for an answer to these questions. I know you are busy, and I am not impatient.

    Here they are...

    Hmmm. By security you mean hiding the URL of the file to be downloaded? Security is maintained now via the browser re-direct?

    So, what you are saying is that it would be difficult to re-direct the browser to a different domain?

    And, one more...would zipping the files allow them to be downloaded from a different domain? Or just that our host wouldn't notice us downloading mp3's if they were zipped?

    In addition, I will be happy to help out answering questions from noobs on the forums, after I learn enough to be able to answer questions. I am not a programmer, though I studied CS in college for a couple years, way back in the era of big iron and green screens, and did programming then. I am very tech savvy, though, and should be able to answer lots of CSS questions, and configuration questions.


    Thanks,

    Tim

  7. #7
    Join Date
    Mar 2004
    Posts
    16,042
    Plugin Contributions
    5

    Default Re: Download from separate domain?

    host wouldnt notice,
    In its ZIP format it as actually not a downloadable MP3.
    Zen cart PCI compliant Hosting

  8. #8
    Join Date
    Jan 2004
    Posts
    66,380
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: Download from separate domain?

    Hmmm. By security you mean hiding the URL of the file to be downloaded? Security is maintained now via the browser re-direct?
    I mean limiting downloads by number of tries, number of days, and hiding the URL via browser redirect or simply streaming the file to the browser from server cache.

    So, what you are saying is that it would be difficult to re-direct the browser to a different domain?
    If you desire to not have folks giving out the URL to your files after they purchase and find out its address, then you would need to build some sort of stripped-down Zen Cart on the remote server which could talk to the main server and validate each download request. Then you need to build security handshaking between the two so that people can't spoof and trick it into thinking they're authorized when they're not.

    And, one more...would zipping the files allow them to be downloaded from a different domain? Or just that our host wouldn't notice us downloading mp3's if they were zipped?
    As Merlin indicated, ZIP files are not usually identifiable by the webserver according to their internal content. However, if the spirit of the requirement is to minimize bandwidth/processing from the main server, they may "catch" you due to the volume of traffic hitting the server and eventually present you with an ultimatum.

    If you look at our Certified Hosts page (see link at top of forum), you'll see that there are many offerings for very low monthly rates ... quite competitive even when compared with non-profit options. If you're making sales, surely you can afford a few dollars a month so everything can run from one place and on a nicely-tuned engine.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  9. #9
    Join Date
    Oct 2004
    Location
    Montana
    Posts
    53
    Plugin Contributions
    0

    Default Re: Download from separate domain?

    Thanks for your replies, fellas.

    I have my own VPS server, so setting it all up on one server would be a piece of cake, it's just that the client (who hasn't been zenned yet, and still has to think) is on a special hosting service, and there is some emotional attachment.

    I guess we will have to talk about our options, which I now understand much more clearly thanks to you guys.

 

 

Similar Threads

  1. v139h Remove sub-domain access from Addon Domain
    By spawnie69 in forum General Questions
    Replies: 5
    Last Post: 17 Apr 2012, 09:45 PM
  2. Replies: 4
    Last Post: 29 Jul 2011, 11:49 AM
  3. Separate Domain for each language implementation
    By tslav in forum General Questions
    Replies: 0
    Last Post: 26 Sep 2008, 02:16 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR