Pay-per-download : how to prevent downloading ?

Next topic

Author	Message
Pascal France	Friday 18 March 2011 11:25:03 am Hi, I'm using the pay-per-download extension (eZP 4.3 on a shared host) and once the user payed his products (PDFs) the system displays a summary of the purchases. In this summary there are links pointing to the PDFs; the form of these links is: http://mysite.fr/content/download/4877/23065 The probleme is that this link works even if one is not logged in. So it can be shared without limit. Is there a workaround ? Pascal Ce qui embellit le désert c'est qu'il cache un puits... quelque part... (A. de Saint-Exupéry) - http://luxpopuli.fr/eZ-Publish
Peter Keung	Friday 18 March 2011 4:14:58 pm content/download links should respect eZ Publish permissions. Have you tested those links in a separate browser or after closing and re-opening the browser? It is likely the browser cache that is letting you download the file even after logging out. http://www.mugo.ca Mugo Web, eZ Partner in Vancouver, Canada
Pascal France	Friday 18 March 2011 4:42:40 pm Hi Peter, Thinks for your reply. I'm stupid ! I gave the anonymous role the rights to read my PDFs........ Now all works as expected. Pascal Ce qui embellit le désert c'est qu'il cache un puits... quelque part... (A. de Saint-Exupéry) - http://luxpopuli.fr/eZ-Publish

Author

Message

Friday 18 March 2011 11:25:03 am

Hi,

I'm using the pay-per-download extension (eZP 4.3 on a shared host) and once the user payed his products (PDFs) the system displays a summary of the purchases.

In this summary there are links pointing to the PDFs; the form of these links is: http://mysite.fr/content/download/4877/23065

The probleme is that this link works even if one is not logged in. So it can be shared without limit.

Is there a workaround ?

Pascal

Ce qui embellit le désert c'est qu'il cache un puits... quelque part... (A. de Saint-Exupéry) - http://luxpopuli.fr/eZ-Publish

Peter Keung

Friday 18 March 2011 4:14:58 pm

content/download links should respect eZ Publish permissions. Have you tested those links in a separate browser or after closing and re-opening the browser? It is likely the browser cache that is letting you download the file even after logging out.

http://www.mugo.ca
Mugo Web, eZ Partner in Vancouver, Canada

Pascal France

Friday 18 March 2011 4:42:40 pm

Hi Peter,

Thinks for your reply.

I'm stupid ! I gave the anonymous role the rights to read my PDFs........

Now all works as expected.

Pascal

Ce qui embellit le désert c'est qu'il cache un puits... quelque part... (A. de Saint-Exupéry) - http://luxpopuli.fr/eZ-Publish