E-junkie - We help you sell online
World Class Solution - Damon @ PayPal
Sell & promote your products Join affiliate programs offered by sellers Shop Community
community home . login . register
  Google Custom Search

E-junkie Ecommerce Forums » E-junkie Discussions

Tag Cloud for this topic:

How secure are the remotely hosted files ?



guest_user
member
Posts: 1302


If I have the download files on my server instead of your server is the link to the file still scrambled in some way?


#
POSTED ON: March 7, 2008 @ 14:51 GMT -7




NatashaSen
E-Junkie Crew
Posts: 1354


Yes, download link still points to E-junkie. You file location is not disclosed.


#
POSTED ON: March 7, 2008 @ 15:08 GMT -7




dkbprofits
member
Posts: 2


Hello friends

Since i am new to all this i would like to know if anyone knows what are
external files and how are they used.

thanks
dkbprofits


#
POSTED ON: March 8, 2008 @ 06:43 GMT -7




Chris_L
member
Posts: 21


External files are hosted on your own server outside of E-Junkie. It's up to you to make sure those files aren't freely accessible from the net, to stop customers bypassing your store and getting downloadable goods for free.

Not really sure how people go about securing these files though, other than turning off indexes etc, as it still has to be accessible to E-Junkie customers.


#
POSTED ON: March 10, 2008 @ 02:48 GMT -7




dkbprofits
member
Posts: 2


Hello Chris

This is from dkbprofits. I would like to thank you for your answer .
This will advise me to watch out and get a hosting server for files. Do you know of
a good host for this ?

thanks
donald


#
POSTED ON: March 10, 2008 @ 05:02 GMT -7
MODIFIED ON: March 10, 2008 @ 05:04 GMT -7




raypryor
member
Posts: 2


Are all the e-junkie external files links coming from the same IP address?

I'd like to do some IP blocking on a directory to protect the files. Thanks in advance.


#
POSTED ON: June 3, 2008 @ 13:39 GMT -7




E-junkieChef
E-Junkie Crew
Posts: 712


You can use .htaccess .. something like

<limit GET>
satisfy any
order allow,deny
Allow from e-junkie.com
</limit>

<limit POST>
satisfy any
order allow,deny
Allow from e-junkie.com
</limit>


#
POSTED ON: June 3, 2008 @ 15:08 GMT -7
MODIFIED ON: July 4, 2008 @ 17:56 GMT -7




Tyson
E-Junkie Crew
Posts: 335


Simpler yet, just place your downloadable files in a subdirectory all their own, then place a blank "index.html" file in that directory to prevent directory browsing. :^)

When we issue a download link for an externally-hosted file, the link itself appears and works exactly the same as if we were hosting the file, with the same access control, unique ID and link attempts/expiration settings. The only difference (without getting into too much boring behind-the-curtain details :^) is that the link triggers a download stream from your server, through our Web cache, then to the buyer, so the file appears to be coming from our server rather than yours. At no point is the buyer ever exposed to the "real" static URL of the file on any server, nor can they tell the file was even remotely hosted, nor is there any way they could analyze the link or download process to discern the location of other files or access any files they did not purchase.


#
POSTED ON: June 3, 2008 @ 19:08 GMT -7




raypryor
member
Posts: 2


Hey thanks for the ideas!

E-junkieChef, what's the IP for e-junkie.com? I tried using the code you sent and it didn't work. My hosting co didn't think that 'allow from' worked with domain names but only IPs. Is this correct? Also, will htaccess protect against direct URL access and well as links?

Tyson_N, that sounds like a great idea, I just want to have something in place just in case someone gets a direct URL path to the files. I guess if I prevent directory browsing, and there are no links to these files on my site, and you guys never show the URL, no one would ever get the URL in the first place, but hey, you never know.


#
POSTED ON: June 4, 2008 @ 08:55 GMT -7




E-junkieChef
E-Junkie Crew
Posts: 712


raypryorwhat's the IP for e-junkie.com? I tried using the code you sent and it didn't work. My hosting co didn't think that 'allow from' worked with domain names but only IPs. Is this correct?


Our IPs you'll see usually are 208.104.6.148 - 208.104.6.155, but this does change and if you enable reverse lookups on your host, the directive I've provided will work.

raypryorAlso, will htaccess protect against direct URL access and well as links?


Yes


#
POSTED ON: July 4, 2008 @ 17:55 GMT -7




E-junkieChef
E-Junkie Crew
Posts: 712


Btw, I've edited my original post to remove www. from www.e-junkie.com


#
POSTED ON: July 4, 2008 @ 17:56 GMT -7




inc101
member
Posts: 1


I've read the 6/3/08 post as set out below. Will this process work OK for the following:
I have a webpage that is the first download after someone purchases my product which consists of written and audio instructions and forms. On this webpage are links to other files which contain word or pdf forms which the purchaser can fill out and print. I'm a little confused but would like to use the easiest process that will also provide some protection for my digital products.

I've been signed up with E-junkie for several months now but have'nt figured out how best to use the system for my product. Any help would be much appreciated.

Thanks

Simpler yet, just place your downloadable files in a subdirectory all their own, then place a blank "index.html" file in that directory to prevent directory browsing. :^)

When we issue a download link for an externally-hosted file, the link itself appears and works exactly the same as if we were hosting the file, with the same access control, unique ID and link attempts/expiration settings. The only difference (without getting into too much boring behind-the-curtain details :^) is that the link triggers a download stream from your server, through our Web cache, then to the buyer, so the file appears to be coming from our server rather than yours. At no point is the buyer ever exposed to the "real" static URL of the file on any server, nor can they tell the file was even remotely hosted, nor is there any way they could analyze the link or download process to discern the location of other files or access any files they did not purchase.


#
POSTED ON: July 15, 2008 @ 19:27 GMT -7




Tyson
E-Junkie Crew
Posts: 335


The most secure method of providing downloads for your product files would involve letting us handle the download-delivery fulfillment. Our system only issues download links to the buyer after the payment processor (PayPal/Google/etc.) confirms the buyer's payment was good and completed. Our links are unique to each transaction, only good for the files the buyer purchased, and only for the number of attempts and expiration time period you specify.

Just configure your products with the File Download setting enabled, then upload your file for each product. If you are on a subscription plan of at least $18/mo, you also have the option of hosting your product files remotely, on your own server rather than ours. In either case, our download links would work the same way, with all the same access-control and expiration settings, and our links would conceal the "real" static URL of your files, so those URLs cannot be passed around the Internet nor used for unpaid access indefinitely.

If your product consists of several files, you can combine them into a single archive file using a program like WinZip, and offer that file as your download. If you have several products that you also want to offer together at a special price as a "package deal", you can use our Package Products method:
http://www.e-junkie.com/ej/help.package.php


#
POSTED ON: July 16, 2008 @ 20:26 GMT -7


You must be logged in to make a post. Please click here to login.

about | contact | resell | terms of service | privacy policy © 2008 19.5 Degrees. All rights reserved.
Designated trademarks and brands are the property of their respective owners.
Use of this Web site constitutes acceptance of the Terms of Service and Privacy Policy.
PayPal Certified Integration Google Checkout Certified Integrattion 30 Day Money Back Guarantee
 Share this page!