why i can download file from download folder directly?

20 Aug 2006, 4:15 AM

#1

plonolp

New Zenner

Join Date:: Aug 2006
Posts:: 6
Plugin Contributions:: 0

why i can download file from download folder directly?

the .htaccess file may not be taking effect.
my host is linux.why?
Thank you.

20 Aug 2006, 4:26 AM

#2

ajeh

Oba-san

Join Date:: Sep 2003
Location:: Ohio
Posts:: 62,757
Plugin Contributions:: 1

Re: why i can download file from download folder directly?

Sounds like your host is not allowing the .htaccess settings work with your site to protect your directories ...

Who are you hosting with and what do you have in the .htaccess file on the server in the /download directory?

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

11 Apr 2007, 4:20 PM

#3

happymom

New Zenner

Join Date:: May 2006
Posts:: 82
Plugin Contributions:: 0

Re: why i can download file from download folder directly?

I have the same problem.

Should the .htaccess file allow a specific user? Or does it have to be a particular user that the zen-cart knows about?

Or would the zen-cart care?

I am concern that if I protect the directory, then none of my downlaods will work.

Thanks!

Norma

12 Apr 2007, 9:18 AM

#4

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: why i can download file from download folder directly?

HappyMom,

If your cart is running on Linux (not Windows) and you have Download-by-redirect enabled or download-by-streaming enabled, then the .htaccess only needs simple protection ... to block everyone.
Zen Cart will read the files there via direct access, bypassing the .htaccess restrictions. Once it reads the files, it can make them available to download via the methods I just mentioned.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

12 Apr 2007, 4:19 PM

#5

happymom

New Zenner

Join Date:: May 2006
Posts:: 82
Plugin Contributions:: 0

Re: why i can download file from download folder directly?

Thanks DrByte!

Just for further clarification...

Where is the "Download-by-redirect enabled" or "download-by-streaming enabled" flag?

Is it on the zen-cart? or php? or the site?

Thanks a lot for your support!

Norma

12 Apr 2007, 10:39 PM

#6

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: why i can download file from download folder directly?

HappyMom:

Where is the "Download-by-redirect enabled" or "download-by-streaming enabled" flag?

Admin->Configuration->Attribute Settings

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.