WordPress.org

Forums

Easy Digital Downloads
[resolved] Protect the download links after purchase??? (25 posts)

  1. siyamak45
    Member
    Posted 2 years ago #

    Is there any way to protect the download links? if i copy the address of emailed link into the Download Manager, it shows the real path of my file and anyone can download it. is this being fixed or am i missing something? Which method of downloads, your plugin uses? DirectDownload or cUrl?

    http://wordpress.org/extend/plugins/easy-digital-downloads/

  2. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    This varies depending on how you have it setup.

    Where are your files stored on your server? Are they in wp-content/uploads/edd/{year}/{month}?

  3. siyamak45
    Member
    Posted 2 years ago #

    my website address is: http://www.mobindownload.com
    my real link adress is:http://dl.mobindownload.com/2012-12/Frnknwnie.Cam.MobinDownload.com.exe

    so they aren't in wp-content/uploads/edd/{year}/{month}. what is paroblem?

  4. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    It's best if the files are placed in the folder(s) that I noted. If you upload the files from the Edit Download page, they will be placed there automatically.

  5. siyamak45
    Member
    Posted 2 years ago #

    Thanks for ur reply, I did your solution and it works correct but I need to protect some links that aren't in "wp-content/uploads/edd/{year}/{month}".
    Is this possible?

  6. siyamak45
    Member
    Posted 2 years ago #

    Please answer to my last question, It is very important to me. pls.

  7. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    The only way to fully protect links outside of the EDD uploads directory is to place them outside of the webroot and then enter the full file path to the file, rather than the URL.

  8. day6artdepartment
    Member
    Posted 2 years ago #

    I've uploaded my digital download (an eBook) into the EDD uploads directory via FTP because the file is too large to upload from the Edit Download page. But when I do a test purchase, a link to the download is in the confirmation page that leads to the real path of my download. Clicking on the link only allows one download, but if I copy and paste the link while downloading, I can download as many times as I like. Can you help me remove the link from the download-confirmation page, so that the download is only available via email?

    Thanks for your help.

  9. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    Is the file in wp-content/uploads/{year}/{month} or wp-cotent/uploads/edd/{year}/{month}?

  10. day6artdepartment
    Member
    Posted 2 years ago #

    edd/year/month

  11. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    Thanks. Can you now give me an example download link you get after purchasing?

  12. day6artdepartment
    Member
    Posted 2 years ago #

    Sorry, I'm not sure exactly what you mean.

    I tried uploading a test document the same way I uploaded my eBook (via FTP), so I could send you a link to download, but when I tested it, it's not doing the same thing. On the purchase confirmation page, at the bottom under "Products," it says "Name". In that box there is the name of my download, and under it, the name is repeated as a link that leads to the real path of my download. Does that make sense? But the name isn't repeated as a link on the example page that I set up.

    If you mean that you would like me to spell out my download url in example form, here it is:
    http://www.example.com/wp-content/uploads/edd/2013/march/example-download.pdf

    Thank you for your help, I'm sorry that this is confusing.

  13. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    When you make a purchase, there are download links sent in the email receipt. Simply copy and paste it here.

  14. day6artdepartment
    Member
    Posted 2 years ago #

    Is there a way of doing this where I don't have to post the link to my download for all to see?

    The links that are sent in the email aren't causing any trouble, they don't redirect you to the real path of my download. Only the links in the "purchase confirmation" page on my site.

    Thank you.

  15. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    The purchase confirmation links and the links in the purchase receipt are identical.

    You can email it to me if you want.

  16. day6artdepartment
    Member
    Posted 2 years ago #

    That would be great, where can I email you?

  17. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    Use this contact page (be sure to reference this ticket): https://easydigitaldownloads.com/contact-developer/

  18. day6artdepartment
    Member
    Posted 2 years ago #

    Thank you, I sent the link.

  19. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    Sorry for the slow reply.

    Go to Downloads > Settings > Misc and check the box for "Enable Symlinks".

    Does that fix the issue?

  20. maxgx
    Member
    Posted 2 years ago #

    the download links in the emails i receive are fine, they do not show the real path.
    however, if anyone spots the use of EDD, and works out the path to the /uploads/edd/YYYY/MM directory, it's quite easy to download a file directly.
    not sure if/how that's achiavable, but is there any way to protect the EDD directories from direct download?

  21. maxgx
    Member
    Posted 2 years ago #

  22. Pippin Williamson
    Pippin's Plugins and Plugin Reviewer
    Plugin Author

    Posted 2 years ago #

    Sorry for the delay on this. That stack exchange post is actually quite similar to what the "Enable Symlinks" option in Downloads > Settings > Misc does.

  23. This issue has been completely resolved in EDD v1.6.

  24. maxgx
    Member
    Posted 1 year ago #

    uhm... not sure about it... unless i'm missing something obvious...

    if i type the complete path /uploads/edd/YYYY/MM/filename.ext, i can still freely download the file.

    whether that path can only be worked out by the site admin or can be revealed during download, i'm not sure, but it hits the file directly.

    and i can't see the "enable symlinks" option in settings>misc: is that the "Download Method" with "forced" and "redirect" as options?
    if so, which one shoul i enable?

  25. The "Download Method" option Downloads > Settings > Misc has to be set to "Forced" in order to file protection to be in place. Once you change that setting, it will create a new .htaccess file with the following rules:

    Options -Indexes
    deny from all
    <FilesMatch '\.(jpg|png|gif)$'>
    Order Allow,Deny
    Allow from all
    </FilesMatch>

    If for whatever reason that file does not get created in wp-content/uploads/edd, you can easily create it.

    Note, the "Forced" download method does not work on 100% of servers. It almost always does, but there are exceptions. When it doesn't work, the method needs to be set to "Redirect", which does not have as good file protection. The Symlinks option is only available when the method is set to Redirect.

Topic Closed

This topic has been closed to new replies.

About this Plugin

  • Easy Digital Downloads
  • Frequently Asked Questions
  • Support Threads
  • Reviews

About this Topic