How to secure my Download page link?

30 replies
Hi All IT geeks or Programmers,


I have created a download page(yourdownloadfile.htm) with some pdf.zip and mp3.zip file for my subscriber to download.

How do i protect my download page and load an expire page after few days to prevent them to past my download link to other people.

Hope someone can help me here!
#download #link #page #secure
  • Profile picture of the author zoobie
    are you using paypal to sell your stuffs? If so I may have something for you.
    PM me if you are interested
    {{ DiscussionBoard.errors[1860905].message }}
    • Profile picture of the author Warrior Junior
      Originally Posted by zoobie View Post

      are you using paypal to sell your stuffs? If so I may have something for you.
      PM me if you are interested

      Yes! I can't pm you as i am a new member here. But i have sign-up for your TUB review, check out my sign-up name Warrior Junior.
      {{ DiscussionBoard.errors[1864181].message }}
  • Profile picture of the author 3nikki
    I use a Wordpress Plugin called 'Wordpress Download Monitor'. It may not be exactly what you need but may help you.
    {{ DiscussionBoard.errors[1861845].message }}
    • Profile picture of the author Warrior Junior
      3nikki,

      Thank you for your wordpress plugin recommendation. It might be useful to my other projects.

      But my current project is not CMS type. Just an ordinary website with some html and css.

      Thanks again!
      {{ DiscussionBoard.errors[1864210].message }}
  • Profile picture of the author mywebwork
    Have you considered e-Junkie?

    E-junkie Shopping Cart for selling downloads & tangible goods

    Integrates with PayPal (and other payment processors), with AWeber (and other autoresponders) and provides your users a temporary download link.

    If you Google for a coupon you can usually get a few months free - even without that it's cheap!

    Bill
    {{ DiscussionBoard.errors[1864519].message }}
  • Profile picture of the author Alex Nash
    As mywebwork above me posted. E-Junkie is a very good shopping-cart if you want to be secure and not revealing the actual download-link too much.


    Regards,
    A.N
    Signature

    Learn from your mistakes. Experience is priceless.

    {{ DiscussionBoard.errors[1865573].message }}
    • Profile picture of the author Warrior Junior
      mywebwork, Alex Nash

      Thanks! Will check it out
      {{ DiscussionBoard.errors[1867822].message }}
      • Profile picture of the author ryanstreet
        You can also look into Amazon's S3 Service for securing downloads. It sets access, expires downloads, and protects content. It it a little complicated, but also one of the best systems out there for protecting your downloads.

        Let me know if you have any questions.
        Signature
        Ryan Street
        PHP Developer Specializing in WordPress and Magento
        {{ DiscussionBoard.errors[1870902].message }}
  • Profile picture of the author oca101
    Banned
    [DELETED]
    {{ DiscussionBoard.errors[1870984].message }}
  • Profile picture of the author senderbot
    I would second the E-Junkie recommendation for someone just starting out in the word of securing your downloads. Easy to set up and integrate with your site.
    Signature
    PornStarStamina is for sale! - Buy the book rights and website! or Just Download the Book For FREE! - Check it out!
    {{ DiscussionBoard.errors[1873627].message }}
    • Profile picture of the author nzjav05
      If your wanting this for NEW subscribers, then E-junkie would be best for you.

      But if your wanting to offer this to your current ones who have already paid, here is a good script:

      Code:
      zubrag.com/scripts/download.php
      The only edit that you will need to do to the script is to expire the download, which can easily be done by:
      {{ DiscussionBoard.errors[1875758].message }}
      • Profile picture of the author spacebean
        I'm going to also suggest E-Junkie, grab the one week free trial and give it a test.

        Other than that I wouldn't waste any more time trying to secure a download. If they are going to the effort of stealing it its likely they aren't going to pay.

        Spend less time worrying about thieves and more time adding value.
        {{ DiscussionBoard.errors[1875857].message }}
        • Profile picture of the author Warrior Junior
          Thank you for sharing everyone!
          {{ DiscussionBoard.errors[1901196].message }}
          • Profile picture of the author radhika
            Hi,

            If you are selling thru Paypal I can help you with to secure your download. Just installing a simple paypal cart automates the downloads and prevents illegal downloads by stopping fake buyers.

            PM me if you still are looking help.

            .
            Signature
            Follow up Autoresponder PRO :: 33% Discount!!
            FREE Upgrades! IMPROVED Email Deliverability!!
            {{ DiscussionBoard.errors[1902414].message }}
  • Profile picture of the author cpaul
    It's easy to secure a download link using php.


    <?php
    $filename = "hiddendirectoryheremessyname/file.exe";
    if(ini_get('zlib.output_compression'))ini_set('zli b.output_compression', 'Off');
    header("Pragma: public");
    header("Expires: 0");
    header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
    header("Cache-Control: private",false);
    header("Content-Type: application/octet-stream");
    header("Content-Disposition: attachment; filename=\"".basename($filename)."\";" );
    header("Content-Transfer-Encoding: binary");
    header("Content-Length: ".filesize($filename));
    readfile("$filename");
    exit();
    ?>
    {{ DiscussionBoard.errors[1902717].message }}
    • Profile picture of the author hypnot
      Thanks guys - some great information here
      {{ DiscussionBoard.errors[1917575].message }}
    • Profile picture of the author GowebMkt
      Originally Posted by cpaul View Post

      It's easy to secure a download link using php.


      <?php
      = "hiddendirectoryheremessyname/file.exe";
      if(ini_get('zlib.output_compression'))ini_set('zli b.output_compression', 'Off');
      header("Pragma: public");
      header("Expires: 0");
      header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
      header("Cache-Control: private",false);
      header("Content-Type: application/octet-stream");
      header("Content-Disposition: attachment; filename="".basename()."";" );
      header("Content-Transfer-Encoding: binary");
      header("Content-Length: ".filesize());
      readfile("");
      exit();
      ?>

      Please email me - sales at goweb.ws - I have a few questions on this - Thanks!
      {{ DiscussionBoard.errors[2004058].message }}
  • Profile picture of the author Gary King
    Download Guard is from Warrior samstephens and has a long history:

    DLGuard - Download page protector, create expiring download links

    Here's a similar thread where Sam responds (there's great testimonials too)
    http://www.warriorforum.com/main-int...ipped-off.html

    I'm not affiliated with DLGuard by the way, just know it's been around for a long time and Sam gets rave reviews for his support.
    Signature

    ===========================
    OFFLINERS! Warning: Unless You Know These Pricing Secrets, You are Leaving THOUSANDS on the Table. Get Your Free Report Now.
    {{ DiscussionBoard.errors[1923192].message }}
  • Profile picture of the author repplanet
    You can place some security checks there, If you don't want to let them download the contents of your web page, simply put the date time check there.
    {{ DiscussionBoard.errors[1923548].message }}
  • Profile picture of the author kidino
    I'd like you to try my super simple, no fees, no registration website service. It's UPLOADnSELL ... seriously, just upload and sell.

    http://uploadnsell.com
    Signature

    DIPPEC - PHP Script for Selling Digital Products with Paypal. No more monthly SaaS fees. No more commission fees. Keep it all for yourself (except for Paypal fees).

    Free Pricing Table Builder

    {{ DiscussionBoard.errors[1963427].message }}
  • Profile picture of the author Loren Woirhaye
    This does it, plus lots else = available in a free version too -

    Delavo - ecommerce for download products

    ...makes expiring links. I usually let them run 48-72 hours.
    It tracks IPs too. I'm not sure at what point it shuts down
    the link due to multiple IP accesses.
    {{ DiscussionBoard.errors[1977576].message }}
    • Profile picture of the author Steve Wells
      Originally Posted by Loren Woirhaye View Post

      This does it, plus lots else = available in a free version too -

      Delavo - ecommerce for download products

      ...makes expiring links. I usually let them run 48-72 hours.
      It tracks IPs too. I'm not sure at what point it shuts down
      the link due to multiple IP accesses.
      Anyone know how to sep up the free verison of delavo? It seems like lots of hoops to jump through to set up. I am sure its good but seems a little complex and confusing?
      Signature
      Need Custom Graphics Work? - Message Me For A Design Quote!
      {{ DiscussionBoard.errors[1993223].message }}
      • Profile picture of the author sawnhanry
        You should have to use some HTTPS(Hyper Text Transfer Protocol Secure).In this protocol files are not directly get without using the authentication.
        {{ DiscussionBoard.errors[1998749].message }}
      • Profile picture of the author Loren Woirhaye
        Originally Posted by EWGQDD View Post

        Anyone know how to sep up the free verison of delavo? It seems like lots of hoops to jump through to set up. I am sure its good but seems a little complex and confusing?
        I know how to set it up. If you've not had much experience
        with script installs it may seem complicated. It's pretty standard
        PHP/MySql stuff.
        {{ DiscussionBoard.errors[2006627].message }}
        • Profile picture of the author Steve Wells
          Originally Posted by Loren Woirhaye View Post

          I know how to set it up. If you've not had much experience
          with script installs it may seem complicated. It's pretty standard
          PHP/MySql stuff.
          Cool, thats great. How about making a short video with a screen recorder of the whole actual process? I would love to learn how to install it. I have it and its just sitting on my desktop..........

          If you make a detailed easy to follow video of the process maybe we can do a barter type thing for it?
          Signature
          Need Custom Graphics Work? - Message Me For A Design Quote!
          {{ DiscussionBoard.errors[2008741].message }}
  • Profile picture of the author TrueStory
    EDIT STUPID BOARD WONT LET ME USE links in my code

    i replaced "." with "_" so keep that in mind in all URLs for your example. and ":" with "="
    My implementation:

    simple logic:

    Password protect original file
    create download directory
    create redirect index.html file so people don't stumble into that directory accidentally
    upon successful payment, copy file to download directory with unique name
    setup a cron script to run



    STEP BY STEP (logic above)
    create password protected directory with original file (use cPanel to do that)
    yourdomain_com/passwordprotectedarea/originalfile.exe

    create "download" directory (i used gibberish skjl23fsadk)
    yourdomain.com/download/

    create redirect to homepage index.html

    <HTML>
    <HEAD>
    <TITLE>I moved!!!</TITLE>
    <META HTTP-EQUIV="refresh" CONTENT="10;URL=http=//yourdomain.com/">
    </HEAD>
    <BODY>
    GO HOME!
    </BODY>
    </HTML>


    put that index.html to the download directory. This is to prevent people from going to directory directly.
    yourdomain_com/download/index.html


    On your "Thank you"/Receipt Page add PHP script to copy custom download file with random ID:


    <?
    $code = md5(uniqid(rand(), true)); //create unique string
    $filename = "originalfile.exe"; // this is your product replace with actual name
    $originalPath = "passwordprotectedarea/"; //this is where file is hidden (see above)
    $downloadPath = "download/"; //this is where your file will be available for download

    $file = $originalPath.$filename;
    $newfile = $downloadPath.$code.$originalPath; //this adds unique ID to filename


    if (!copy($file, $newfile)) { //copy the file to download directory with Unique ID in name
    echo "failed to Generate Download Link, Contact <a href=\"mailto:support@yourdomain.com">support@your domain.com</a> ...\n"; //just incase something goes wrong.
    }
    else
    {
    echo "Your Download Link is: <a href=\"http=//www_yourdomain_com/".$newfile."\">Click Here To Download (www_yourdomain_com/".$newfile."). This link will be VALID for 48 hours"; //notify them of download link with unique ID and that it will be removed in x hours.
    }
    ?>



    Now Create a CRON JOB in Cpanel to run every 15 or 30 mins, irrelevant and have it run this command:

    find /path/to/download/ -name *productname.exe -type f -mtime -2 -delete

    this will remove ALL files from download older than two days that end with "productname.exe" in the name (index.html will be left untouched)



    PLEASE contact your host support to help you out with full path. you also need to knwo where shell bin command resides in your server. They will gladly help you with that. explain what you're doing.

    Email them ********BEFORE******* setting up cron job, tell them

    "I am trying to remove ALL files in my /download/ directory except index.html. How can i use "find /path/to/download/ -name *productname.exe -type f -mtime -2 -delete
    " with cron.

    they will assist you. Each server configuration is different.


    KEEEP IN MIND ALWAYS BACKUP before removing anything on your server.
    Signature

    Your business matters only to people that matter to your business[/U][/B] - Reach them?

    {{ DiscussionBoard.errors[1991800].message }}
  • Profile picture of the author oca101
    Banned
    [DELETED]
    {{ DiscussionBoard.errors[2005267].message }}
    • Profile picture of the author casius
      @oca101 How CAPTCHA will help???? I just do not get it...Also if you want to secure the download link for your software i would recommend to use client license plugin for wordpress which will monitor your downloads and user accounts.
      Signature
      Cloud VPS || Shared Hosting
      Web Hosting Solutions for Geeks!
      HOST1PLUS
      {{ DiscussionBoard.errors[2005761].message }}
  • Profile picture of the author shanmarpo1910
    cool post...




    love it....



    thnx
    {{ DiscussionBoard.errors[2009530].message }}
  • Profile picture of the author nikomaster
    I have a method from which you can create your own download links and make them expire after time:

    If you are using databases such as MySQL create a table "download_links" or if you have table "users" add a two columns: "download_link","expiration"

    Create a function: that generates a random key:
    Example: PHP
    Code:
     function genKey()
    {
          srand();
           r=rand(8,10);
          str="";
          for(i=0;i<r;i++)
          {
               str.=chr(rand(40,125));
          }
    
          return str;
    
    }
    Store that code into you download_link column. and apply and l=md5(str) and build the link
    and return to the user a link such as site.com/download.php?link=l
    Add the expiration time into the table with the time function
    The link will be a coded link so when the user clicks the link you must verify whether the time
    has expired and whether the md5(link)==str if it is true you can perform the download.
    {{ DiscussionBoard.errors[5573194].message }}

Trending Topics