TheMayhem:
I've run into one more problem related to this. When people who've purchased an order go to download the .zip file: They receive a HTTP 400 Bad Request Error :( I checked the admin cp and the file is definately showing as being read and correct under the Download Manager and the file is on ftp, so I don't know why it won't let them download a .zip file and is giving them a 400 error. Any ideas???
Maybe your hosting server can't handle the default method by which Zen Cart serves downloadable files.
By default Zen Cart uses the more secure method of "Download by Redirect", in which it creates a temporary copy of the download file and points your customer to that copy for direct download. If your server can't handle that reliably, then maybe you'll have to turn off the Download By Redirect option and simply serve files directly from their original location in the /download/ folder. That's much less "secure", since customers could share the download link with their friends and let them grab as many copies of the file as they want.
But, it would be worth testing it even temporarily to see if the download works when redirect is disabled.
Another option is to download by streaming, but that has other performance issues depending on your server's capabilities, and can sometimes cause other errors if your server can't handle it. That would be another thing to test, but not the recommended fix.
There's lotsa info available about using downloadable files: simply use the "search" in the FAQs section and search for "download" :blush:
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.