Downloadable products – URL not hidden

Dear friends,

I have a serious issue. The link for downloadable products, included in the final customer mail AND in the account section, opens a new window/tab and links to the requested file by showing the full path in the url address field of the navigator, which causes for me a security issue.

I don’t know exactly since when because I have found it recently. I controlled some settings, in the Woocommerce products->downloadable product-> the downloadable method is selected to “Force the download”. I even tried other options without any change. I’ve seen that when I hover the mouse on the link (the final customer mail link and the link visible in the account section) we can see, in the state bar of the navigator in bottom, the good hidden url “http://www.mysite.com/?download_file=480&order=wc_order_565fde2dd7c45&email=……” but when we click on it, instead of opening directly a downloading file window, it opens a new tab with the full path in the address bar “http://www.mysite.com/MP3/……” and a default music player where the music runs.

Thanks a lot for any kind of help to fix it.

https://wordpress.org/plugins/woocommerce/