Customer to add virtual product to database.

[izak30]

Ok, I am developing the following idea.

 

The customer is going to purchase a *token the token allows the customer to add a virtual (downloadable) product to the database.

 

Then, after the purchase process, the customer is given a link to a product insertion page (custom, not the oscommerce standard one). This page would check the validity of the token, and then get the information about the product (price, title, etc), and take the customer to an upload page

 

The upload page will include a java applet to add the product to the /download folder, and it will be inserted into the database.

 

Software on the server will check to make sure the file is the correct type and that it meets other restrictions before making the product available in the catalog.

 

My question is, am I overlooking anything major? are there security issues that i am overlooking?

 

Just so you know, the incentive for the customer to add to our database is 75% of the profits of the sale of that item (through various reporting means, and sending checks, eventually to be automated via paypal or something else)