Guest Posted July 24, 2010 Posted July 24, 2010 I've been looking into how to make downloads secure as I read somewhere that people can steal downloads or get them when their payment hasn't gone through. But I'm confused by this - looking at the knowledge base for V2.2 (I'm using V2,2 RC2a)you can set the order status so that they don't get the download link till you've marked the order as processed or delivered. So it seems like you have some control so you and can verify that the money has actually been paid to you before you let them have the link. So I'm confused as to what the use of the add ons Download Controller is or Superdownload Shop. Do they automize that process so you don't have to do it manually? I need an add on that can do that. I also read somewhere that people could get the download link and steal products, but you have to be logged into the store to get the link and can set a download limit, so how can the link be abused? So, what exactly are the security risks in terms of getting payment and downloads? My head is spinning :blink: :D
♥14steve14 Posted July 24, 2010 Posted July 24, 2010 Hi On a standard oscommerce setup you have to manually alter the order status before the download link is available to yoyur customer. From a customers point of view, why should you wait to receive your download. A customer will not be able to receive the download until you have changed the status. As you rightly say, the two contributions you have mentioned automatically check for payment and alter the status accordingly, giving your customer an immeadiate download link. Much better for the customer. I am not going to say on here how the download used to be abused, and it wasnt the link that was being abused, but both of these contributions correct the error. If youa are offering downloads you should install either of the contributions that you mention. REMEMBER BACKUP, BACKUP AND BACKUP
Guest Posted July 24, 2010 Posted July 24, 2010 Hi On a standard oscommerce setup you have to manually alter the order status before the download link is available to yoyur customer. From a customers point of view, why should you wait to receive your download. A customer will not be able to receive the download until you have changed the status. As you rightly say, the two contributions you have mentioned automatically check for payment and alter the status accordingly, giving your customer an immeadiate download link. Much better for the customer. I am not going to say on here how the download used to be abused, and it wasnt the link that was being abused, but both of these contributions correct the error. If youa are offering downloads you should install either of the contributions that you mention. Hi Steve, thanks very much for your response it's really helpful :) . I'm now thinking of installing Downloads Controller as it seems easier than the other one, but it's quite an old contribution, I hope it works okay with RC2a.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.