Click to See Complete Forum and Search --> : File Security...


BeachSide
05-12-2005, 04:56 AM
Here is the situation...

I have a client that will need his digital media secure so that people will be able to download it only if they have paid for the media.

What would your suggestions be to make it so that people cannot "steal" his media? I am open to any and all suggestions. I know there are a number of services/companies available that will house the files and whatnot. I am thinking that this should be the way to go. If anyone has any knowledge of good ones that do not cost an arm and a leg your help would be much appreceated.

Or if you know of another way, maybe a server side script that would be just as effective that would be wonderful as well.

I really more or less need a direction to go. :confused:

Thank you

BeachSide

scragar
05-12-2005, 05:11 AM
how does the customer pay? by cash, postal order or what?

I personal would say use an SSL to determine if an ID(I like using paypal transaction IDs, but if your not using paypall this is useless) is valid, and if so include the file from your root directory and abort the page.

BeachSide
05-12-2005, 12:09 PM
The customer could be using paypal as the payment gateway. I recommended to the client sometime ago to sign up for it and get verified.

See I was going to go the SSI route but I read somewhere that it was not a very good way to go.

That is what I am going to do. It is the quickest and easiest way.

felgall
05-12-2005, 07:47 PM
I use Paypal to receive payments and then use a Paypal IPN script to email the purchased file to the email address of their Paypal account. Doing this means that the files are not linked to from any pages on my site (just from the IPN script) and it also handles payment via echeck where the payment takes 4 days to process.

BeachSide
05-12-2005, 10:44 PM
Email delivery isn't really an good option due to the large file size of the digital media :(

Although if we told them ahead of time that a file would be of a certain size...

Do you do send the email with the attached file manually or is it automated?

BeachSide
05-12-2005, 10:58 PM
how does the customer pay? by cash, postal order or what?

I personal would say use an SSL to determine if an ID(I like using paypal transaction IDs, but if your not using paypall this is useless) is valid, and if so include the file from your root directory and abort the page.

The more I think about it the more I like using this idea as well as the PayPal IPN

Thanks to both of you for your help! :D