New Download 403 Error

[bw1z]

Just started setting up a new install with the latest zen version 154.
Added a download product.
Created product and linked to zip file in download folder green OK. ( folder & file permisssion 755 )
Set up attributes OK.
Went through checkout OK.
Followed email and clicked on download button.

Got a 403 & 500 server error.

Checked server errors ( hosted site with fixed IP & no SSL setup yet ) and saw:
Premature end of script headers: 500.php
SystemException in API_Linux.cpp:444: execve() for program "/ramdisk/php/54/bin/php54s" failed: Resource temporarily unavailable
...
ModSecurity: Access denied with code 406 (phase 1)
...
Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary.

Not much of an Apache expert.
Any suggestions?

[mc12345678]

What method of download is offered? Is it download by redirect?

[bw1z]

It is the built in download button on the order form:

Order Information - Order #5
...
To download your files click the download button and choose "Save to Disk" from the popup menu.
Item Name File Size Filename Link Expires Remaining
Test Zip 159 bytes IIoT.zip Unlimited --- *** --- Download Now

<a href="....com/index.php?main_page=download&amp;order=5&amp;id=3"><img src="includes/templates/template_default/buttons/english/button_download.gif" alt="Download Now" title=" Download Now " height="15" width="66"></a>

[mc12345678]

Admin->configuration->attributes, is download by redirect yes (or true) or no (false)?

[bw1z]

That was it !
Changed it to false and worked fine.
THANKS

[mc12345678]

That was it !
Changed it to false and worked fine.
THANKS

Well, may want to change it back with the following modification applied.

Based on the above: security setting of 755 working, take a look at includes/modules/pages/download/header_php.php and you will see that the temporary directory for redirect downloads is set to 0777. This should be changed for your server to 0755... Then re-enable redirect download. Also, if the download worked with that set to false and streaming set to false, then understand that once someone has downloaded a file from the download directory, they pretty much have enough information to download the file again without accessing their profle....

To address the second issue, either need to modify the download/.htaccess file or need to relocate the download folder outside of the website path. See applicable FAQ