[mv] Protecting Payload

[jyu@worldwatch.org]

******    message to minivend-users from jyu@worldwatch.org     ******


Hello,

We sell numerous products from our store in downloadable electronic format.  The
way it is currently set up, the reciept page produces links to the products all
within in a single directory elsewhere on the machine.

This is clearly not an effective solution, and has become a serious problem such
that the number of product downloads far outweigh the number of purchases.  Once
one knows which directory the files are stored in, even if the directory does
not allow indexing, one can access the remainder of our products if they know
the product codes.

I'm wondering if anyone has any ideas on a scheme to protect downloadable
payload.  I'm considering a redirect which produces the product based on
recieved argument and referring page, but again, anyone with enough creativity
and free time can find a way around this.  It could obscure the true location of
our products, but only that. 

Any help would be appreciated.  We're running v.3.08 (Our BSDI server doesn't
like anything higher.)

Thanks.


--

Jason Yu (jyu@worldwatch.org)
Worldwatch Institute
http://www.worldwatch.org/

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list