logo
Welcome to our new AbleCommerce forums. As a guest, you may view the information here. To post to this forum, you must have a registered account with us, either as a new user evaluating AbleCommerce or an existing user of the application. For all questions related to the older version of Gold and earlier, please go to forums.ablecommerce.com. Please use your AbleCommerce username and password to Login. Forums Registration.

Notification

Icon
Error

Options
Go to last post Go to first unread
IDAutomation  
#1 Posted : Wednesday, October 9, 2019 1:15:21 PM(UTC)
IDAutomation

Rank: Newbie

Groups: Authorized User, Developers
Joined: 11/13/2018(UTC)
Posts: 6

Thanks: 10 times
Is there a way to not have all the download links generated by the store to be in sequential order?

For example, we have customer 1 who receives 3 download links:
https://www.idautomation.com/Download.ashx?id=1
https://www.idautomation.com/Download.ashx?id=2
https://www.idautomation.com/Download.ashx?id=3

But then the next customer, customer 2, gets 2 download links that are the next 2 in order:
https://www.idautomation.com/Download.ashx?id=4
https://www.idautomation.com/Download.ashx?id=5

We would like for this to be random, not easily figured out as we have had issues in the past where someone will see this pattern and just download other customer's download links. We do not want the downloads to require logins because we have resellers that send the software to their customers but do not want them to see what they paid or access to their accounts.

In the past, we have worked with RegNow/Digital River and they would use the atomic clock to create a download url based on date/time when it was activated and that couldn't be easily deciphered.

Wanna join the discussion?! Login to your AbleCommerce Forums forum account. Forums Registration.

katie_able_support  
#2 Posted : Friday, October 11, 2019 1:00:04 PM(UTC)
katie_able_support

Rank: Advanced Member

Groups: Developers, Registered, HelpDesk, System
Joined: 10/29/2018(UTC)
Posts: 72

Was thanked: 2 time(s) in 2 post(s)
So you are wanting to distribute downloads to your customers who pass along the download links to their customers, while bypassing our member login requirements...

I would say that your best bet is to repeat the same technique that you did in the past and create a download URL that is more secure than one with an ID. I have a hard time recommending anything less secure if you want to remove the requirement for member login.

It might be possible to randomize the ID's, but that might require some more advanced customization than we are able to give here in the forums.

Let me know if you have any questions.

Thanks
Katie
IDAutomation  
#3 Posted : Friday, October 11, 2019 2:03:53 PM(UTC)
IDAutomation

Rank: Newbie

Groups: Authorized User, Developers
Joined: 11/13/2018(UTC)
Posts: 6

Thanks: 10 times
We didn't create those download links to do that, it was already an integrated feature. So I don't know how to replicate it with your software.

It's been a vulnerability that we want to close up because we have caught shady people stealing software. :(

Any suggestions on how to do this would be very appreciated, and I'm sure a feature other customers could benefit from as well.
katie_able_support  
#4 Posted : Monday, October 14, 2019 8:54:44 AM(UTC)
katie_able_support

Rank: Advanced Member

Groups: Developers, Registered, HelpDesk, System
Joined: 10/29/2018(UTC)
Posts: 72

Was thanked: 2 time(s) in 2 post(s)
Hello,

Yes, I have some suggestions using the features that are built-in. Edit any digital good to see what's available.

  • You can checkout the "Media Key" feature which allows you to enter an optional key to unlock the distributed file.

  • There are settings that allow you to set a maximum number of downloads and timeouts.

  • We also have a full license key management system, but that would have to work with your digital products.


If you would like to request a new feature, we just opened a new forum for this purpose.

https://www.ablecommerce...merce-9-Feature-Requests

Thanks,
Katie



Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.