I'm sure someone will correct me if wrong but, doesn't downloads.php check to make sure the order is not pending or some other status other than delivered?

Once funds are collected the status of the download is changed and I think the file is not available till then.

Way too late to do full research so you get a 50/50 guarantee. Fifty feet or fifty seconds.