Hey all, we are running a software download site using WordPress Download Monitor. It is a great plugin that pumps downloads through a script.
However, users from other sites etc. can simply post the direct URL to our site to download files, and bypass our website. We obviously don't want this to happen.
example.com/download/firefox/ ... correct download page
example.com/yes/firefox.exe ... direct link allowed right now! =(
Does anyone know how to hack the WordPress Download Monitor, or .htaccess to prevent users from directly calling the download script?
Thank you ahead of time.
P.S. all the typical "anti-hotlink" rules for .htaccess have NOT worked for us at this point!