Can we customize the DOWNLOAD Folder ?

Typically the Zencart has a download folder, where we need to put all the PDF files for the DOWNLOADABLE option.

But once the user downloads a PDF file once, he is able to predict the Download directory and has direct access to the files. So it's becoming futile to make a paid downloadable distribution.

Any way to create our own customized DOWNLOAD directory through the zen cart admin ?

Prabhat

This?

https://www.zen-cart.com/content.php?257-how-do-i-relocate-my-download-folder-outside-my-webroot-for-better-security

... and pulling from the article that stevesh pointed to above, which version of "Download" are you using? If you use Download by Redirect (the default), then what you're describing is not possible since each time the download is requested a new temporary file is created within your /pub directory from which that download is sourced.

prabhatM:

Typically the Zencart has a download folder, where we need to put all the PDF files for the DOWNLOADABLE option.

But once the user downloads a PDF file once, he is able to predict the Download directory and has direct access to the files. So it's becoming futile to make a paid downloadable distribution.

Any way to create our own customized DOWNLOAD directory through the zen cart admin ?

Prabhat

Why not modify the .htaccess file like so and leave the folder where it is?:

# but now allow just *certain* necessary files:
#<FilesMatch "(?i).*\.(zip|gzip|pdf|mp3|swf|wma|wmv|wav|epub|ogg|webm|m4v|m4a)$">
#  Order Allow,Deny
#  Allow from all
#</FilesMatch>

lat9:

... and pulling from the article that stevesh pointed to above, which version of "Download" are you using? If you use Download by Redirect (the default), then what you're describing is not possible since each time the download is requested a new temporary file is created within your /pub directory from which that download is sourced.

True if using the code to download, but I found the same problem on my site... Was able to enter the direct path to a file in the download folder where the download folder had not been moved outside of the public folder until the above .htaccess modification was applied. (Using download by redirect).

Filename of the original file is provided once received and therefore, going to mysite / download /filename downloads the file... :/

Yes, to prevent all access to the /download folder, you'll need to relocate it as per the FAQ article, or modify the /download/.htaccess file.