Setting up automatic downloads help needed please.

[misty]

So what prevents a customer to buy the product flowerpower.zip, then to all his friends just send the url: www.site.com/download/flowerpower.zip for direct downloads when he now knows the filename for the file.

Try uploading a zip file to your download folder, then access it via i.e.
www.yoursite.com/download/flowerpower.zip.. not possible.. zencart will
not allow direct access

[coulix]

I did, and it worked fine.. Zencart cant really prevent this at all, its webserver structure file functionality. Only thing i can think of is to alter the filename to the user when he downloads it.

[misty]

I did, and it worked fine..

Strange, have 3 different versions of zencart, attempting to download
a file does not work on any of them

[coulix]

What filesystem rights do those files have? if a domain like www.site.com has a subdirectory named download with files in it. Not much prevents a user to go directly to those files without any "beyond-stock-limits". After doing a fresh ZC install for instance, i can directly download all the demo files in it without problems. So i wonder where the limitation is supposed to be set.

[Ajeh]

With the .htaccess in the /download directory ... if you had the file test.zip in the /download and tried to access:

http://www.your_domain_name.com/your...nload/test.zip

You will get a warning to login to the directory ...

The .htaccess in the /download directory reads:

#prevent directory browsing -- for security
IndexIgnore */*

AuthType Basic
AuthName "No access"
AuthUserFile .htnopasswd
AuthGroupFile /dev/null
Require valid-user

[coulix]

i have the .htaccess in place, i do not get a login dialog. i get a save file as dialog.

[jesphoto]

The full lenght of link it is never shown.Then what stopping you from name download dir to other name or make subdir.Assuming that you purchase a photo from my web site(jesphoto.net). You will not see the full lenght. You can try to "waste" a dollar for some cheep phot and see if you can gess the full lenght to download another for free.The zencart it is fully customize. You can have dir and subdir any way you want to. If your web site it is hosted on server the your dir wil be "public_html\zencart\download and file.zip. Then you can name the zencart dir as "public_html\zenmine\download and file.zip. The download dir can have subdir 123456 for example and no one know if next file will be in 132456.
The thief will have to guess the zncart dir and subdir.Too much trouble to steal 1 dollar.
Works for me

[BouncerFL]

With much appreciation to all for this and other posts, I must reveal my ignorance in something regarding downloadable or 'virtual' products via zen cart.

I'm running 1.3.7 on Linux and having no issues other than this:

I've successfully defined attributes and options for products which are demonstration or evaluation copies of software. It works quite well.

I assume once we're doing live CC transactions, it will work just as well for products which have a price (other than Free) associated with them. Today, when testing the process, I entered a test order to my cart, selected qty 1 of an item which is US$39.99, and completed the order using 'payment by check' as a payment method.

I'd hoped (and still do) that Zen has a facility for storing the URL which contains the download and that upon payment, the cart would email said URL to paying client. I'm not seeing how or where this is going to happen and am hoping to find some answers here.

Thanks in advance to this wonderful community to which I'm happy to belong.

Regards,
~Ray
BouncerFL

[ezskratch]

Hello -

Zen - getting there! One motorcycle at a time...

Quick question -

I have a digital product that requires me to confirm that I have payment before it is available for delivery. If payment made by check or money order, I don't want them to get the goods until I say it is ok (check clears). The way I am able to make this work now is by changing the status to shipped - and that triggers download availability. I want to keep it like that, but for instant paypal payments, I would like to make the downloads available right away. I have been pulling only an authorization on the credit cards - and actually capturing the funds after the customer approves the final product proof. Here is my question - Will just changing the PayPal capture - to actually charge the card upon order - make the product available for download, or will I still have to manually change it to "shipped" to allow this?

Thanks!

Skratch

[Ajeh]

The Payment Modules all have an Orders Status ...

The Downloads are available based on the orders_status ... when set to >= 2 (Processing) or <= 4 (Updating) ...

If you set a Payment Module orders_status to 1 or Pending, then you have to release it after you receive payment and then the customer can download it ...