Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
February 07, 2012, 08:49:28 PM

Pages: [1]   Go Down
  Print  
Author Topic: problem not to steal my products  (Read 1715 times)
Bolivar
Newbie
*
Offline Offline

Posts: 4


« on: June 23, 2009, 02:06:29 PM »

hello everybody

I'm new on this forum, i'm french speaking.
I've created a .htaccess script to protect my products on my website and it didn't work. I've been advise to remove and to protect by the protection tools on cPanel. I do it and to have access to products, you need a password.
What I want exactly is that, when I give autorisation to someone to download products to do it immediately without password.
Here is an example of link I can give someone to download product : "http://url-ok.com/af25a2".
Can somebody try it and tell me what to do ?

Thanks to everybody.   
Logged
Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #1 on: June 24, 2009, 06:06:34 AM »

I tried it out, and it redirect me to your password protected folder, and came up with the login box - looks like everything is working the way you wanted it to.  If there is anything else we can assist you with though, please feel free to let us know!
Logged

New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!


Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
Bolivar
Newbie
*
Offline Offline

Posts: 4


« Reply #2 on: June 24, 2009, 02:35:18 PM »

Hi,
Thank you for your reply.
That's not exactly what I want.
I don't want people to need password before download products when I give them the link.
Why is it not possible to protect my products with .htaccess as I do before ?
I've removed it, but it seems like the owner of lunarpages have put it again. If it's the case, why is it not working.
Let me again provide you with the .htacess script I've used. If there is any mistacke into this script, tell me what to do to make it works :

PerlSetVar AuthFile passw/mot-de-passe.txt
AuthName "Accès restreint"
AuthType Basic
<limit GET POST>
require valid-user
</limit>

Thank you
Logged
Mitch
Berserker Poster
*****
Offline Offline

Posts: 12838


WWW
« Reply #3 on: June 25, 2009, 05:44:09 AM »

Ok, I think I get what you are looking for, you want is (and correct me if I am wrong).

1.  I pay you for a product
2. You give me a link I can only access, that can't be shared, so I can download the product

Is that what you are wanting to do? 
Logged

New to Web Site Hosting? Check Out the Lunarpages Blog Hosting Guide!


Follow us @lunarpages on Twitter!
Important Threads: Read This Before Posting! | Lunarforums Rules! | Mitch's Link of the Day!
Also, be sure to check out and subscribe to the Lunartics Blog and the Lunarpages Newsletter !

Need Web Hosting Help? Check out the Lunarpages Web Hosting Wiki. It has tons of tips, tutorials and resources!
Bolivar
Newbie
*
Offline Offline

Posts: 4


« Reply #4 on: June 25, 2009, 06:00:37 AM »

hi,
that is exactly what I want to say.
If you can do something for me.

Thanks
Logged
MrPhil
Berserker Poster
*****
Offline Offline

Posts: 5080



« Reply #5 on: June 25, 2009, 10:22:26 AM »

So you want to give a customer a unique and unguessable link to the product, but you don't want them to have to enter an ID and password? An ID and password would be something from cPanel's "password protect directory" function. That's what you had there -- what other "protect with .htaccess" function are you thinking of?

I suppose you could randomly generate (from letters and numbers) a ridiculously long directory name for each customer's purchase -- say, http://yoursite.com/downloads/73gkjfpouj324r9grweoiretpiewo8uytjwsh/product.zip. From your viewpoint, it's probably less work than generating an ID and password using cPanel would be. From the customer's standpoint, it's probably more work to type in a long directory name than an ID and password, although it's not bad if you provide a clickable link in an email.

Don't forget to either disable automatic indexing (or put some sort of index.html) in the /downloads directory, so that no one can browse the directory and see all the funny long names and follow them to steal stuff.
Logged

Bolivar
Newbie
*
Offline Offline

Posts: 4


« Reply #6 on: June 25, 2009, 12:50:08 PM »

Thank you for your reply.
I've a program that generate a short link name for each customer's purchase. It looks the same as the one you are advising me to create. But it always ask for a password.
How should I proceed ?
It looks like this: http://url-ok.com/af25a2
Logged
MrPhil
Berserker Poster
*****
Offline Offline

Posts: 5080



« Reply #7 on: June 25, 2009, 02:07:01 PM »

You need to clarify whether the password is from the built-in password-protection (.htaccess and related files) or from a running program. If it's built-in, your program is apparently creating and adding to a password file just like the one that cPanel's "password protect directories" would create. I haven't tried it myself, but I think it's possible using PHP code. In that case, is it also asking for an ID or user name? I don't know if it's possible to have this system only ask for a password.

Is your system running a script that asks for just a password, once the purchaser gets to the correct directory? The link you gave me goes to some French-language site -- I don't know if there was something there that you wanted me to see, or it was just an example URL.

Is it possible that your script is creating an FTP account and the link goes to it, but the user still needs to enter a password? I'm not sure how to implement something like that (if it can even be done).
Logged

MarkCale aka Madscape
Spaceship Navigator
*****
Offline Offline

Posts: 78



« Reply #8 on: October 27, 2009, 12:18:25 AM »

You also want to make sure that the directory password protect is not enabled in the control panel and if so simply disable it.
Logged

Forum Lurker and Former Galactic Tekkie, mostly a jack of trades and master of none!  Mark H. Cale
Pages: [1]   Go Up
  Print  
 
Jump to: