Files aren’t protected & can be downloaded for free

  • I’d love to give EDD a 5 star review, but unfortunately it currently has a major functional flaw that leaves any downloaded files unprotected and accessible to the public for free. This is despite EDD advertising that all files are protected. So setting up an online store with paid digital files can be easily circumvented by anyone without an account on your site, which practically renders the entire plugin as useless.

    I’d love to come back and re-review this if they fix this issue, but for now the plugin is at best misleading in the description of its functionality, at at worst a bit of a scam, which is a real shame because it could be such a great and easy integration for those trying to setup a digital marketplace.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author Chris Klosowski

    (@cklosows)

    @seanpguy

    I’m sorry you are having issues. Have you verified that you have the proper server side configuration to protect the files? We have documentation that talks about how to do this here:
    https://docs.easydigitaldownloads.com/article/194-are-download-files-protected

    There are a number of settings that can be used to protect your files including a ‘forced’ download, as well as the Redirect method with SymLinks (which makes a temporary file that removes the file so it is not downloadable a minute later). These settings can be viewed in Downloads > Settings > Misc > File Downloads. As there are a number of different ways hosting configurations can be created, we have created multiple settings in order to try and accommodate as many as possible.

    Thread Starter seanpguy

    (@seanpguy)

    @cklosows

    The protection issue occurs when any user uploads a download using FES. Once their file is uploaded, they are given a link, and this link gives access too all other users downloads on the site. This means any digital marketplace created with EDD will have unprotected files accessible by anyone.

    Plugin Author Chris Klosowski

    (@cklosows)

    @seanpguy so that is a separate issue than EDD itself. Have you contacted our support team, as we are not able to do support on the forums for our paid add-ons.

    Thread Starter seanpguy

    (@seanpguy)

    @cklosows I have contacted the support team and they responded saying they are aware it is an issue but were unable to give any timeline on if or when it might be resolved.

    @seanpguy Hi,

    I wanted to follow up and let you know that our Frontend Submissions extension version 2.6.7 that was recently released does resolve this issue. I responded to you through our support channel as well.

    Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Files aren’t protected & can be downloaded for free’ is closed to new replies.