403Forbidden Error on video downloads

[sbaker6612]

Hello,
We recently upgraded from v151 to v154 of Zencart and are using a new template Theme872. The video downloads we offer have been setup exactly the same way that they were in v151 (where they worked as expected) , but when the customer now attempts to download the files, the result is a 403 Forbidden error.
Details:
1. In the Media Types we have authorized both .mov and .mp4 files
2. The files are in /download/videos/Folder name/File name (most of the videos are 1gig or more so have been broken into 2-4 files for easier downloads)
3. We get the "green light" on the files showing that the Attribute Name and Attribute Value have been setup correctly.
4. The downloads show up on both the back end and in the customers account signifying that they are ready to be downloaded after the order had been successfully charged (position 3).
5. Our site resides on a Linux based server.
Any help would be appreciated.
Thanks,
Steve

[sbaker6612]

Eureka! I figured it out. Turns out that the Redirect toggle under the Configuration/Attributes tab was set to true. So many variables so little time...

[mc12345678]

Eureka! I figured it out. Turns out that the Redirect toggle under the Configuration/Attributes tab was set to true. So many variables so little time...

That's not exactly a problem and actually is a "security" feature that has now been disabled. If that is the case, then perhaps the folder settings that get assigned in the includes/modules/pages/download/header_php.php file are too high. If you look in that file for 0777 and change it to 0755, then the redirect should work.

To explain the added "security"... with redirect active, when a customer goes to download the file(s), a random directory is created, a link to your file(s) is also created and the transfer of the file(s) begun. In this condition the customer could possibly learn the name of the file/folder of the temporary folder, but that doesn't stick around long.

In the current non-redirect setup, if one learns the path to the file, then they can repeatedly download it without further assistance and worse without being tracked and even possibly further worse without purchasing the item(s) because the location could be distributed.

[barco57]

did you make sure that the file extensions were added to the .htaccess in the downloads folder?

The stock version has the following:

<FilesMatch "(?i).*\.(zip|gzip|pdf|mp3|swf|wma|wmv|wav|epub|ogg|webm|m4v|m4a)$">