Sino T Posted February 3, 2014 Share Posted February 3, 2014 Hello all, I have a project with Prestashop 1.5.6. In that i have some virtual products. When i done an order i got the link to download the product through email. The link this 'http://mydomain.com/index.php? controller=get-file&key=jehrbrjhfgfj2123&id_order=10&secure_key=fcf2ad83d0b4fc77243e10eea0282fc4' . My problem this, I can download the same product without the secure_key. ie, I can download the same product with link also 'http://mydomain.com/index.php? controller=get-file&key=jehrbrjhfgfj2123&id_order=10&secure_key=' Please give me a solution to solve this issue. Link to comment Share on other sites More sharing options...
vekia Posted February 4, 2014 Share Posted February 4, 2014 it also download files when customer isn't logged in? Link to comment Share on other sites More sharing options...
Sino T Posted February 4, 2014 Author Share Posted February 4, 2014 No,the customer is not logged in prestashop... Link to comment Share on other sites More sharing options...
CristenClark Posted June 17, 2014 Share Posted June 17, 2014 Hi, I am interested to know if this has been answered? I am setting up a new shop and would like to protect my virtual products as much as possible. Thank you! Link to comment Share on other sites More sharing options...
bellini13 Posted June 17, 2014 Share Posted June 17, 2014 The best thing to do is override this controller and add additional logic to ensure that the customer is logged in prior to allowing the download. The core controller is defective Link to comment Share on other sites More sharing options...
CristenClark Posted June 18, 2014 Share Posted June 18, 2014 The best thing to do is override this controller and add additional logic to ensure that the customer is logged in prior to allowing the download. The core controller is defective That sounds like a good solution. Is there a module that would do that for me? Link to comment Share on other sites More sharing options...
bellini13 Posted June 18, 2014 Share Posted June 18, 2014 I am not aware of a module that would do this, and a module is over kill, since the GetFileController does not offer any hooks that a module could use. If you are proficient with PHP, then you should be able to view the GetFileController and determine where changes need to be made. Otherwise you are best to hire a professional that can implement your desired changes. 1 Link to comment Share on other sites More sharing options...
CristenClark Posted June 19, 2014 Share Posted June 19, 2014 I am not aware of a module that would do this, and a module is over kill, since the GetFileController does not offer any hooks that a module could use. If you are proficient with PHP, then you should be able to view the GetFileController and determine where changes need to be made. Otherwise you are best to hire a professional that can implement your desired changes. Thank you so much for your help, I will look into that! Link to comment Share on other sites More sharing options...
.png.022b5452a8f28f552bc9430097a16da2.png)
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now