Symlink File Permissions

[MystikMusikEnt]

Hello,

I set up my Zencart, and it seems to be working alright so far, but I ran into a problem with downloadable products. I got that age old 403 error.

"You don't have permission to access /ZenCart/pub/.sqbdszhbjzxqxcbnx/Lambo_Life_In_The_Fast_Lane.rar on this server."

I know people have said to change the permissions in the folder pup to 777. I did that, and it didn't work....it got changed back as a possible solution while I was talking to Tech Support.

They said that the files in pup are being created with 777, but if it were possible to change them to 755 they would probably work. Is this possible?

would love a solution to this problem.

Thanks for your time,
JB.

http://www.mystikmusik.com

http://www.mystikmusik.com/forum
(free albums, reviews, interviews, and more ;) )

[MystikMusikEnt]

I really really need this to work, because my merchandise is going to be mainly digital. ZenCart being a free dilivery system with protected links will save me a lot of money...

I'm not sure how to go about changing these permissions though...

[DrByte]

It's not a symlink issue. It's a security issue.

If you want to serve .rar files, you'll need to add that file extension to the list of allowed types in your /pub/.htaccess file.

Ref:
http://www.zen-cart.com/forum/showthread.php?p=1006107
http://www.zen-cart.com/forum/showthread.php?p=944543

[MystikMusikEnt]

This was absolutely the problem. I redid everything in Zip files, and it worked find. Thanks man. Saved me on this one. I was hardcore on google trying to fix this, lol.

[DrByte]

Ya, sometimes the security protections are a bit overkill, but we've opted for "deny everything, and just allow what we need", to save having to maintain all the million possible rogue things to keep adding to a blacklist. This is much simpler to maintain, both for us and for you. :)

[MystikMusikEnt]

I thought I posted this here, but it must have gone somewhere else...I've opened the accesss file, and added wav like this in the list where the rest of the files are added wav|WAV...but at the end of the order process when I click download the browser opens a new page with my wav loading as a quicktime movie with the bar...

sorry for the double post, not sure where the post went the first time.

[nigelt74]

I thought I posted this here, but it must have gone somewhere else...I've opened the accesss file, and added wav like this in the list where the rest of the files are added wav|WAV...but at the end of the order process when I click download the browser opens a new page with my wav loading as a quicktime movie with the bar...

sorry for the double post, not sure where the post went the first time.

Thats a function of the users browser, if you want people to download the files, zip them, otherwise things like mp3s wavs and pdfs will automatically open/play rather than download.

so really you have two choices
1) get every potential customer to change the default behaviour of their browser OR
2) Zip them

[DrByte]

Or, you can uncomment the 2 lines a little further down in your .htaccess file which will tell it to download as a file instead of playing it directly ... as long as your webserver allows the use of those directives.