Selling downloads - need random filename?

28 Aug 2012, 11:08 PM

Zen Follower

Join Date:: May 2009
Posts:: 228
Plugin Contributions:: 1

Selling downloads - need random filename?

Ive used ZC for a while now but this is first time ive tried to sell downloadable product

Ive set the download folder to 755 and the download files to 644

if my file is called product1.zip they can download that. But by going to /downloads/product2.zip when they are logged in they can also get that without paying for it?

So the solution is to have a random characters in the filename? Is there a better solution?

28 Aug 2012, 11:17 PM

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,515
Plugin Contributions:: 176

Re: Selling downloads - need random filename?

I just clicked on the FAQ Search, entered "downloads" as the keyword, and came up with these 3 articles, which are all related to your question:
http://www.zen-cart.com/content.php?264-download-delivery-methods-explained
http://www.zen-cart.com/content.php?159-how-do-i-secure-my-downloads-folder-to-prevent-theft
http://www.zen-cart.com/content.php?257-how-do-i-relocate-my-download-folder-outside-my-webroot-for-better-security

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.