Need help with attributes please

But if I do that, won't the zip files still be accesible from the store/ if they know the folder name? Can't they just go to https://www.mydomain.com/store/downloads and access all the files?

I wanted to avoid this by moving the downloads folder above the public_html directory. I think I am confused by your answer. Sorry. Maybe it is the new baby that fried my brain. :(

My path to my shop is:
/home/myusername/public_html/shop

My path to my downloads directory is:
/home/myusername/downloads

this places the directory above the /public_html so no, it is not accessible via the browser ...

Yes, that is where I have hers located and that is the path I have specified in the configure.php files, but it still is not working. Any other suggestions?

When you say it is not working ...

What are you seeing?

Are you just going by the green dot on the Attribute filename not being there and you see a red dot?

Or, are you trying to make an order and the order is not seeing the download?

Is the filename a zip file?

Yes, the file name is a zip file.

I am seeing a red dot instead of a green dot. That leads me to believe that I do not have the file path correct in the configure files but I know I do. I am probably missing something so simple. Would you like me to include or email the entire configure.php files?

Could you check the files:
/includes/configure.php
/admin/includes/configure.php

that are on the server and make sure that they are up to date with the right settings for the:

  define('DIR_FS_DOWNLOAD', '/home/your_username/your_downloads/');

I have added a folder above the "/store" folder called "download" and changed the configure files to reflect this and I am now getting an error message on the sore saying this:
Warning: The downloadable products directory does not exist: /home/username/download/. Downloadable products will not work until this directory is valid.

It did not do this when I had define('DIR_FS_DOWNLOAD', '/home/username/');

Not sure what to make of that. I am sorry for all the back and forth. I am just so perplexed by why the exact configuration works on my own store site, but not on hers. I do need to update my version of zen cart. maybe that is why?

Do you see:
/home/username/
/home/username/download/
/home/username/public_html/
/home/username/public_html/store/
/home/username/public_html/store/includes/
/home/username/public_html/store/your_admin_dir/

I have used that in my own store and it works fine.

Why is it not working in her store?

Why, when I do use the path you gave me, does it give me that error message at the top of her store?

Please post, from the server, the two files:
/store/includes/configure.php
/store/your_admin_dire/includes/configure.php

NOTE: do not show your real /admin directory name or your passwords

From the /store/your_admin_dire/includes/configure.php:

<?php
/**
 * @package Configuration Settings circa 1.3.9
 * @copyright Copyright 2003-2010 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * File Built by zc_install on 2010-10-27 08:41:40
 */


/*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/
/***************       The 2 files should be kept separate and not used to overwrite each other.      ***********/

// Define the webserver and path parameters
  // Main webserver: eg-http://www.your_domain.com - 
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
  // HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.your_domain.com
  /* 
   * URLs for your site will be built via:  
   *     HTTP_SERVER plus DIR_WS_ADMIN or
   *     HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or 
   *     HTTP_SERVER plus DIR_WS_CATALOG or 
   *     HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
   * ...depending on your system configuration settings
   *
   * If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
   */
  define('HTTP_SERVER', 'http://www.scraps-n-pieces.com');
  define('HTTPS_SERVER', 'https://www.scraps-n-pieces.com');
  define('HTTP_CATALOG_SERVER', 'http://www.scraps-n-pieces.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.scraps-n-pieces.com');

  // Use secure webserver for catalog module and/or admin areas?
  define('ENABLE_SSL_CATALOG', 'false');
  define('ENABLE_SSL_ADMIN', 'false');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_ADMIN', '/store/admin');
  define('DIR_WS_CATALOG', '/store/');
  define('DIR_WS_HTTPS_ADMIN', '/store/admin');
  define('DIR_WS_HTTPS_CATALOG', '/store/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
  define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
  define('DIR_FS_ADMIN', '/home/username/public_html/store/admin');
  define('DIR_FS_CATALOG', '/home/username/public_html/store/');

  define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
  define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
  define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
  define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
  define('DIR_FS_DOWNLOAD', '/home/username/');

// define our database connection
  define('DB_TYPE', 'mysql');
  define('DB_PREFIX', 'znc_');
  define('DB_SERVER', 'localhost');
  define('DB_SERVER_USERNAME', 'xxxx');
  define('DB_SERVER_PASSWORD', 'xxxx');
  define('DB_DATABASE', 'xxxx');
  define('USE_PCONNECT', 'false');
  define('STORE_SESSIONS', 'db');
  // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage

  // The next 2 "defines" are for SQL cache support.
  // For SQL_CACHE_METHOD, you can select from:  none, database, or file
  // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
  // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
  // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
  define('SQL_CACHE_METHOD', 'none'); 
  define('DIR_FS_SQL_CACHE', '/home/username/public_html/store/cache');

// EOF

This is from the /store/includes/configure.php:

<?php
/**
 * @package Configuration Settings circa 1.3.9
 * @copyright Copyright 2003-2010 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * File Built by zc_install on 2010-10-27 08:41:40
 */


/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
/***************       The 2 files should be kept separate and not used to overwrite each other.      ***********/

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
  define('HTTP_SERVER', 'http://www.scraps-n-pieces.com');
  define('HTTPS_SERVER', 'https://www.scraps-n-pieces.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'false');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', '/store/');
  define('DIR_WS_HTTPS_CATALOG', '/store/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
  define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

  define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
  define('DIR_FS_CATALOG', '/home/username/public_html/store/');

  define('DIR_FS_DOWNLOAD', '/home/username/');
  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
  define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
  define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
  define('DB_TYPE', 'mysql');
  define('DB_PREFIX', 'xxxx');
  define('DB_SERVER', 'localhost');
  define('DB_SERVER_USERNAME', 'xxxx');
  define('DB_SERVER_PASSWORD', 'xxxx');
  define('DB_DATABASE', 'xxxx');
  define('USE_PCONNECT', 'false');
  define('STORE_SESSIONS', 'db');
  // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage

  // The next 2 "defines" are for SQL cache support.
  // For SQL_CACHE_METHOD, you can select from:  none, database, or file
  // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
  // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
  // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
  define('SQL_CACHE_METHOD', 'none'); 
  define('DIR_FS_SQL_CACHE', '/home/username/public_html/store/cache');

// EOF

For this define, you are using:

  define('DIR_FS_DOWNLOAD', '/home/username/');

what are you entering as the filename on the Attribute?

The folder name then the name of the zip file. For example: downloads/file_name.zip.

My thinking was this would allow for the store owner to have multiple manufacturers/designers that will upload each to their own folder and specify that at the beginning of their attribute file path. For example: designer1/file_name.zip or designer2/file_name.zip . That way they do not have access to the other designers files but just to their own specific folder.

So you have the file:
/home/username/downloads/file_name.zip
/home/username/designer1/file_name.zip
/home/username/designer2/file_name.zip

on the server?

do you have an .htaccess file in these directories?

No I do not have the /home/username/designer1/file_name.zip and /home/username/designer2/file_name.zip on the server, but I do have the first one (/home/username/downloads/file_name.zip) on the server. I am just trying to get that one to work for now. If I can get that one to work, then I assume the other ones will work once the store owner gets to that point.

What is .htaccess? Not sure on if I have .htaccess. Sorry.

What are the permissions on the directory:
/home/username/downloads

what are the permissions on the file:
/home/username/downloads/file_name.zip

If you do not see the .htaccess in the directory:
/home/username/downloads

for the moment, we will assume that there isn't one ...

Permissions on the downloads folder is 755 and 644 on the file on the file itself. I do see the .htaccess in the root directory. Sorry, I wasn't sure what you were referring to before.

What does the file:
/home/username/downloads/.htaccess

read?

This is all I have:

RewriteEngine on
# Use PHP5 Single php.ini as default
AddHandler application/x-httpd-php5s .php
RewriteCond %{HTTP_HOST} ^scraps-n-pieces.com$ [OR]
RewriteCond %{HTTP_HOST} ^www.scraps-n-pieces.com$
RewriteRule ^/?$ "http\:\/\/www\.scrappinwithlori\.blogspot\.com" [R=301,L]

Are you looking for the .htaccess in the:
/home/username/downloads/.htaccess

If so, could you rename your file:
/home/username/downloads/.htaccess_HIDE

and put in the default .htaccess that should be there:

#
# @copyright Copyright 2003-2010 Zen Cart Development Team
# @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
# @version $Id: .htaccess 16111 2010-04-29 22:39:02Z drbyte $
#

AuthType Basic
AuthName "No access"
AuthUserFile .htnopasswd
AuthGroupFile /dev/null
#Require valid-user


###############################
#
# This is used with Apache WebServers
#
# The following blocks direct HTTP requests to all filetypes in this directory recursively, except certain approved exceptions
# It also prevents the ability of any scripts to run. No type of script, be it PHP, PERL or whatever, can normally be executed if ExecCGI is disabled.
# Will also prevent people from seeing what is in the dir. and any sub-directories
#
# For this to work, you must include either 'All' or at least: 'Limit' and 'Indexes' parameters to the AllowOverride configuration in your apache/conf/httpd.conf file.
# Additionally, if you want the added protection offered by the OPTIONS directive below, you'll need to add 'Options' to the AllowOverride list, if 'All' is not specified. 
# Example:
#<Directory "/usr/local/apache/htdocs">
#  AllowOverride Limit Options Indexes
#</Directory>
###############################

# deny *everything*
<FilesMatch ".*">
  Order Allow,Deny
  Deny from all
</FilesMatch>

# but now allow just *certain* necessary files:
<FilesMatch ".*\.(zip|ZIP|gzip|pdf|PDF|mp3|MP3|swf|SWF|wma|WMA)$">
  Order Allow,Deny
  Allow from all
  
  # tell all downloads to automatically be treated as "save as" instead of launching in an application directly
  # (just uncomment the next 2 lines by removing the '#'):
#  ForceType application/octet-stream
#  Header set Content-Disposition attachment
</FilesMatch>

IndexIgnore */*


## NOTE: If you want even greater security to prevent hackers from running scripts in this folder, uncomment the following line (if your hosting company will allow you to use OPTIONS):
# OPTIONS -Indexes -ExecCGI

Seriously consider using your Downloads directory as:
/home/username/downloads

and subdirectories as:
/home/username/downloads/designer1

and have your configure.php use:

define('DIR_FS_DOWNLOAD', '/home/username/downloads/');

and enter the filenames in the
/home/username/downloads
file_name.zip

and enter filenames in the
/home/username/downloads/designer1

designer1/file_name.zip