Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #11652

Re: Secure website

Show all headers | View raw

On 30/10/13 04:02, Graham Hobbs wrote:
> Hellop,
>
> I have an ordinary website (all PHP), it has no 'conscious'
> protections, just code that does a job. One page (not written yet
> because I don't know how), will advertise a product for sale.
>
> My concept is that a buyer goes to a paypal screen, does the
> necessary, when payment is verfified and paid, an email is
> automatically sent to the buyer with a download key. At the buyers
> dicretion, they go to the download page, enter the key and the
> software gets downloaded. Is this sort of thing a novice PHP'er could
> do.

Sure a novice coder could do it, but the question is if it's a good 
solution they do or not.

> ... how to prevent more than one download, do I store the software
> package on my ISP's server, is it safe, since it has several exe files
> would they be in a zip file, how to assign a download key, let the
> whole process be automated?

You store the key in a database, together which package, who and a 
download time.
When the user request for the file, you check against the database to 
see if the row has a download time, if not allow the start of the 
download (keep in mind that the user do not get a direct download link, 
but it's the php which serves the content to the user) and when the 
whole file been sent, then update the row with a download time.

See to that the zip files ain't located in the DocumentRoot directory, 
for it they do, then you can download them without the need of the key 
you want to send.

And yes, it can be made completely automated, take advantige of the 
PayPal IPN system and do not forget that PayPal transactions has a highe 
chargeback fee and customers do more disbutes than with other payment 
alternatives, so somone could pay and download your product and then 
disbute the payment and in worst case you will have to pay for it, so 
you need to log everything on your site, so you can proof that the 
customer did download the product they paied for.

-- 

  //Aho

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-29 23:02 -0400
  Re: Secure website Denis McMahon <denismfmcmahon@gmail.com> - 2013-10-30 03:26 +0000
  Re: Secure website "J.O. Aho" <user@example.net> - 2013-10-30 06:52 +0100
    Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-30 10:47 -0400
      Re: Secure website "J.O. Aho" <user@example.net> - 2013-10-30 18:03 +0100
        Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-30 19:18 -0400
  Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-30 14:56 -0400
    Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-30 19:15 -0400
      Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-30 23:03 -0400
        Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-31 10:27 -0400
          Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-31 11:24 -0400
            Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-31 12:47 -0400
              Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-31 20:36 -0400
  Re: Secure website David Quinton <usenet_2005D_email@REMOVETHISBITbizorg.co.uk> - 2013-10-31 10:24 +0000
    Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-31 10:28 -0400

csiph-web