Zen Cart Logo
Forums / Setting Up Categories, Products, Attributes / stealing mp3's from the Media folder

stealing mp3's from the Media folder

Locked

Views: 922

Results 1 to 3 of 3
This thread is locked. New replies are disabled.
24 Feb 2009, 7:04 PM
#1
redheadskater avatar

redheadskater

New Zenner

Join Date:
Nov 2007
Posts:
18
Plugin Contributions:
0

stealing mp3's from the Media folder

Hi-

I have a site that is currently only selling 1 mp3 song. I have the product setup, including a 30 second demo and after purchase the download proceeds smoothly.

The problem I'm having is that if someone navigates to:
https://www.site.com/media/

They can download the full mp3 song without paying. How do I prevent this from happening?

24 Feb 2009, 7:23 PM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: stealing mp3's from the Media folder

Your /media/ folder should only contain the DEMO file used to play the preview on the product info page.
You should have your /media/ folder secured according to the published security guidelines to prevent people being able to browse the folder contents directly.

Your /download/ folder should contain the actual real file which is only provided to the customer after they've purchased.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.