Author Topic: There are download security issues !  (Read 4109 times)

Offline Storyresources

  • Newbie
  • *
  • Posts: 14
  • Karma: +1/-0
    • View Profile
There are download security issues !
« on: June 03, 2013, 07:09:20 AM »
 :o
Very sadly i have set up my cart and most things seem to be working, BUT i have just run through a test purchase and found that there are some serious concerns for those of us selling digital delivery items  :o

Here what i found:
logged in as a client in storefront and made a test purchase
Went to the download area to get my purchases, and found that you can download and save the purchased file - which I don't want clients to be able to do - I only want them to be able to print the file
, BUT BUT BUT ....
 the real issues is that if you simply right click on the DOWNLOAD button you can open the file, and the your order is not updated to indicate this, so in fact your can open and save the file as many times as you like simply using the right click feature


So  it would seen at this stage that AbanteCart is not suitably secure for digital product delivery, unless you don't mind how many times the file is downloaded
This is a real shame is I was starting to really like this program

I'd be very keen to hear what the developing comments are on this and if there is any plan to secure digital delivery

Carolyn


Offline abolabo

  • core-developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 1816
  • Karma: +264/-11
  • web for all, all for web!
    • View Profile
    • AbanteCart
Re: There are download security issues !
« Reply #1 on: June 03, 2013, 07:18:47 AM »
is it?
“No one is useless in this world who lightens the burdens of another.”
― Charles Dickens

Offline Storyresources

  • Newbie
  • *
  • Posts: 14
  • Karma: +1/-0
    • View Profile
Re: There are download security issues !
« Reply #2 on: June 03, 2013, 07:30:49 AM »
No i have my downloads set to 1

If you run a test purchase through my store exactly like a client would see at www dot storyresources.co.nz/index.php?rt=account/download

its till in test mode... so your welcome to give it a try and see what you find
I'd love to hear you can fix this issue, otherwise I have to go back to my old cart

Carolyn

Offline Storyresources

  • Newbie
  • *
  • Posts: 14
  • Karma: +1/-0
    • View Profile
Re: There are download security issues !
« Reply #3 on: June 03, 2013, 07:47:12 AM »
I screen shot is attached for you
Carolyn

Offline Storyresources

  • Newbie
  • *
  • Posts: 14
  • Karma: +1/-0
    • View Profile
Re: There are download security issues !
« Reply #4 on: June 03, 2013, 06:55:24 PM »
Any ideas ????

Carolyn

Offline Storyresources

  • Newbie
  • *
  • Posts: 14
  • Karma: +1/-0
    • View Profile
Re: There are download security issues !
« Reply #5 on: June 03, 2013, 11:24:16 PM »
OK AbanteCart.com you win, I've given up waiting to hear from you, so will look for another shopping cart option. :-\
Carolyn

Offline Basara

  • Administrator
  • Hero Member
  • *****
  • Posts: 4577
  • Karma: +223/-0
    • View Profile
Re: There are download security issues !
« Reply #6 on: June 04, 2013, 02:04:35 AM »
is it?
I can confirm the bug. "Total Downloads Allowed" not work (AbanTeCart v1.1.5). If set it to 1, customer able to download more than 1 time.
“Chuck Norris is so amazing.”
― Mother Teresa

Offline abolabo

  • core-developer
  • Administrator
  • Hero Member
  • *****
  • Posts: 1816
  • Karma: +264/-11
  • web for all, all for web!
    • View Profile
    • AbanteCart
Re: There are download security issues !
« Reply #7 on: June 04, 2013, 03:53:47 AM »
bug fix is replacing of file public_html/storefront/controller/pages/account/download.php by attached
“No one is useless in this world who lightens the burdens of another.”
― Charles Dickens

Offline Storyresources

  • Newbie
  • *
  • Posts: 14
  • Karma: +1/-0
    • View Profile
Re: There are download security issues !
« Reply #8 on: June 04, 2013, 04:26:51 AM »
AWESOME thank you, the systems no longer allows multiple downlands

Could I suggest, that if you guys are working towards solution for anything, that you post a reply to let us know your looking into it, otherwise we're not sure if a reply is coming. Especially when i see a number of other posts on the forum that don't get replies.
Perhaps sometime when you have hours of free time  ;) someone could add comments to some of these topics that gets looks of views, as obviously some of us do try and look for solutions here before asking for your help.

Carolyn




Offline abantecart

  • Administrator
  • Hero Member
  • *****
  • Posts: 4219
  • Karma: +266/-9
    • View Profile
    • Ideal Open Source Ecommerce Solution
Re: There are download security issues !
« Reply #9 on: June 04, 2013, 08:27:12 AM »
Be mindful, this is a forum and not individual support.  Members get to this as they can. There are no promises or deliverable dates.
We need your help to build better free open source eCommerce platform for everyone.
See how you can help

 

Powered by SMFPacks Social Login Mod