Export order line items plus userID and passwords

[METV]

We sell digital downloads and we need to secure all of our digital download files with DRM. In order to allow our users to unlock the files, we need to issue a DRM key.

This is done through MS Media Player that asks them for their user ID and password. Our DRM licensing system then needs to do a look up on the user ID from ZenCart, confirm the password as well as the downloaded file name. If they match, we issue the key to the user's Media Player app and it opens.

Any ideas on how I can easily export the userID, PW and order line items with the download file names to another database. I figured it would be better to try and do this outside of ZenCart as a separate database that our security system would query using XML.

Any suggestions on approach or export apps that could be modified?

Thanks

[kobra]

All but the pass should be simple...
ZenCart does not store the pass in clear text and uses a modified MD5 hash and for which there is little published for obvious reasons.
You can change this with this being open source at your own risk

[METV]

OK - that makes way too much sense. Still, I assume there is a way to verify the user name and password? That would be more than sufficient. Then we can access the other file of products downloaded by the user id once we have confirmed the password is valid. Do we know where ZEN stores the product names of download files in orders?

[kobra]

Do we know where ZEN stores the product names of download files in orders?

Not sure what you are looking for????

Downloadable products are ones that you setup and are via attributes and you must place them(FTP) in the downloads folder...So the names that you assign to these products are stored in the products table in the database which can be different than the file name of the download

[METV]

In order to deliver a digital key to the user after they download the product, we need to confirm they bought the product. This is done by windows media player requesting a user ID and password. media player knows the original name of the file which is encoded into the WMV file when we apply the DRM license before it is stored on our download. Our DRM server then is contacted by windows media player and asks for a license. Our system needs to take the information provided by media player and compare it to the order information - specifically the name of the file, the user ID that bought the file and the password.

Hope that helps

[yellow1912]

If you can somehow have your program to authorize the passwords against the mysql database then it will work just fine. You can check the login process to see how the password is hashed and then compared to the ones in the database. You can then have your program does the exact samething.

[METV]

Thanks - thats the direction we were heading.