Downloads showing full link including showingh my s3 access key

[Wayne]

Hi, I have emember and estore and trying to set up a download for my members from a protected page.

Download is set up as a product via estore and the correct s3 security settings and s3 download link are in the download (download works)

I have ticked the box in the product for downloadable so expecting an anonymous link

However if i log onto my members site and download the file i see the full link including my access key. I have put this below but marked out the access key stuff on the forum

[http://wealthbootcampbooks.s3-ap-southeast-2.amazonaws.com/think-and-grow-rich-NAPOLEONHILL.pdf?AWSAccessKeyId=xxxxxx&Expires=zzzzzzz&Signature=yyyyy]

I can cut and paste this and retrieve the file without any issues or security.

Have i missed something here to protect my files

Thanks

wayne

[admin]

There is nothing to worry about. Thats how Amazon s3 API works. That link won’t work after a few hours.

The access key is something that amazon s3 API puts in the URL but it doesn’t mean it is a security issue.

[Author]

Posts