• Resolved thuys

    (@thuys)


    I have a digital product which is hosted in Google Drive. I set that URL for download link and Payment settings for downloadable products in Woo-Commerce are set like these:

    • Force download (I want to choose redirect but because of privacy reason as Woo-Commerce recommended, I choose this one)
    • Allow using redirect mode (insecure) as a last resort is checked

    But after customer clicked on the link sent in email (after the order is completed), the file downloaded is very weird:

    • its name is “edit” which is not the name of the file in Google Drive
    • file type is “File“, I dont know what it means, and I cant open it either.

    Please tell me if I do something wrong or it is Woo-Commerce that has error.

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support RK a11n

    (@riaanknoetze)

    Hi there,

    If you’re using offsite download links for your files, then none of the security/privacy built into WooCommerce itself applies as anyone with the link to the Google Drive file will be able to download the file.

    Out of interest: Why are you hosting the file on Google Drive rather than directly on your web server?

    Either way, if the file is hosted on Google Drive, you’ll want to select “Redirect Only (Insecure)” and make sure the checkbox for “Allow using redirect mode (insecure) as a last resort” is checked.

    Thread Starter thuys

    (@thuys)

    Hi,

    As I read on Woo’s instructions, Force Download allows people to get the file without knowing the download link (in this case, Google Drive link), so somehow it reduces the risk of them sharing the link. I thought it would be at least some amount of privacy protection. Am I get it wrong?

    For your question, I am afraid the files could burden web server, though I am not sure it is the right concern.

    Plugin Support Shameem R. a11n

    (@shameemreza)

    Hi @thuys

    The Force Download option in WooCommerce is designed to work with files hosted on your own server. It works by hiding the actual URL of your file, and providing a unique, non-guessable URL to the customer upon purchase. However, when you use an external hosting service like Google Drive, this option may not work as expected.

    The strange behavior you’re experiencing with the file name and type might be due to Google Drive’s handling of direct download links. When you use the Force Download option with a Google Drive URL, it might cause conflicts, as WooCommerce tries to apply its own security measures, which Google Drive may not support.

    For files hosted externally, it’s typically recommended to use the Redirect Only (Insecure) option. This option redirects the customer to the file URL on Google Drive. While this option doesn’t hide the actual file URL, it’s usually the most compatible option for externally hosted files.

    However, it is a valid concern if you’re selling large files or have a high volume of sales. If this is not the case, hosting the files on your own server could provide a smoother experience for your customers and more control over the download process. If you still want to share via Google Drive, you can use a plugin like Infinite Uploads, Offload Media or Integrate Google Drive to use Google Drive as your cloud storage.

    I hope this clarifies your concern. If you have any other questions, feel free to ask.

    Thread Starter thuys

    (@thuys)

    It’s all clear, though I do hope Woo Commerce can handle downloading from third party the way they did with WP server.

    Thank you.

    Thread Starter thuys

    (@thuys)

    Still privacy concern and maybe off the topic but it would be nice if you could let me know. If I host files on WP sites, how to hide it from search engine like Google Search… so people cant find it just by searching for it?

    Plugin Support Zubair Zahid (woo-hc)

    (@doublezed2)

    Hello thuys,

    Thank you for your reply.

    I have read the whole conversation and I believe these two resources will prove useful for you.
    How to Prevent Hotlinking
    How to Connect WordPress to Amazon S3 Bucket

    Please don’t hesitate to contact us again if you have more questions or concerns.
    We are here to help ??

    Best regards.

    Thread Starter thuys

    (@thuys)

    Thanks alot, I will check them out.

Viewing 7 replies - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.