Tips and Tricks HQ Support Portal › Forums › WP eStore Forum › Encryption issues
Tagged: Download Validation Script., open_basedir restrictions, shorten encrypted URL, Virtual Server
- This topic has 10 replies, 3 voices, and was last updated 13 years, 2 months ago by wzp.
-
AuthorPosts
-
September 25, 2011 at 4:37 pm #4405SimoneFitzyMember
Hi
I am selling PDF files with Acrobat Forms on them. I have 2 issues regarding encryption:
(1) When I CHECK the Downloadable check box in the Product area, the encrypted link in my email on purchase doesn’t work – it returns pages of red gobbledegook in the browser. I have tried this for a couple of products and they all do the same thing.
However, when I don’t check this box, my URL becomes visible after clicking on the encrypted link in the email.
What should I do?
(2) Also my encrypted links in the email sent to the buyer are HUGE (2 lines long!) is there any reason for this? I would prefer them to be shorter! I would send you a screenshot but don’t know how!
September 25, 2011 at 7:22 pm #37003wzpModeratorWhen you check the Downloadable box, eStore acts as a middle man between the file and the buyer. The file is first read by eStore and then pushed to the buyer. Sometimes, with large files, things need tweaking because of server performance issues.
https://support.tipsandtricks-hq.com/forums/topic/wp-estore-download-methods
The reason the links are long, is because of the encrypted query string at the end of the URL. You can however compensate, by using the custom download validation script, to shorten what comes before the query string.
http://www.tipsandtricks-hq.com/ecommerce/how-to-customize-the-encrypted-download-url-224
September 25, 2011 at 11:26 pm #37004adminKeymastereStore also has a feature that can allow you to use Google URL shortener on your encrypted links (this can come in handy if you want to deliver a shortened version of the encrypted link to your customer). Let me know if you want to use it and I will tell you how to enable it.
September 25, 2011 at 11:27 pm #37005SimoneFitzyMemberThanks I will test out those download options and see which ones work!
Can you clarify for me:
– Uploading my pdf’s via the WordPress Library is ok; and
– I have a red warning in my Settings section under Download Validation Script Location – even though I haven’t changed the default location in that area (which is http://www.simonemadeit.com/wp-content/plugins/wp-cart-for-digital-products/). The part in read is as follows:
“You do not need to change this value unless you want to customize this. Can be used to customize the download URL Read More Here.
Configuration hint for the custom_download.php file is –> $wp_home_dir = ”; Warning: file_exists(): open_basedir restriction in effect. File(/usr/local/pem/vhosts/105437/webspace/httpdocs/wp-content/plugins/wp-cart-for-digital-products/download.php) is not within the allowed path(s): (/usr/libexec/php5-cgi/share/pear/:/usr/libexec/php5-cgi/share/pear/:/usr/local/pem/vhosts/105437/webspace/siteapps/:/usr/local/pem/vhosts/105437/tmp/) in /usr/local/pem/vhosts/105437/webspace/siteapps/18253/htdocs/wp-content/plugins/wp-cart-for-digital-products/wp_digi_cart_admin_menu.php on line 1224
ADVISORY: If you changed the download validation script location, please remember to install a customized version of download.php as per the above instructions. Note: If you are using a subdomain for the download validation script location, that is different from that of the eStore plugin, this message may be a false positive. But just to be sure, please double check your work, before ignoring this message.”
Thanks so much for your help!
Regards
Simone
September 26, 2011 at 12:21 am #37006adminKeymasterYes, uploading your PDFs via media library is fine. This post will shed more light on this topic:
https://support.tipsandtricks-hq.com/forums/topic/download-directory-protection
First, get everything working in its default setup. Don’t mess around too much with the validation script location stuff first (this option can get messy unless you know what is really going on). If you have messed this value up then check this post to correct it:
After you get the normal download condition working just let me know and I will tell you how to do the URL shortening option (this option will work better for you).
September 26, 2011 at 12:36 am #37007SimoneFitzyMemberHi
Thanks for your quick replies!
I have followed the above link instructions so the Download Validation Script Location is set to the default.
I still get this error message in red though “Warning: file_exists(): open_basedir restriction in effect. File(/usr/local/pem/vhosts/105437/webspace/httpdocs/wp-content/plugins/wp-cart-for-digital-products/download.php) is not within the allowed path(s): (/usr/libexec/php5-cgi/share/pear/:/usr/libexec/php5-cgi/share/pear/:/usr/local/pem/vhosts/105437/webspace/siteapps/:/usr/local/pem/vhosts/105437/tmp/) in /usr/local/pem/vhosts/105437/webspace/siteapps/18253/htdocs/wp-content/plugins/wp-cart-for-digital-products/wp_digi_cart_admin_menu.php on line 1224 “
Does that matter?
Regards
Simone
September 26, 2011 at 1:07 am #37008SimoneFitzyMemberHi again
UPDATE FROM ABOVE MESSAGE:
I have tried each of the 8 download methods as suggested. When I have the Downloadable box Checked, I still get the page of gobbledgook opening up in my browser for each of the 8 different download methods.
I have noticed that the first part of the gobbledgook starts with the same error message that is appearing in the Settings “Download Validation Script Location” section (that I quoted above).
Hope you can help!
Simone
September 26, 2011 at 1:22 am #37009wzpModeratorYou are running on a virtual server, and your hosting provider has turned on open_basedir restrictions; meaning the ability of PHP scripts to access files is restricted to a pre-defined directory tree. When eStore tries to crawl through your system, looking for the WordPress installation directory, it triggers the error. This behavior is necessary, because when the buyer clicks on a download link, the WordPress environment is not fully available, and eStore has to “get its bearings.” You saw the error on the settings screen, because eStore was trying to validate the location of the download.php file. And again, when the download.php script was actually launched. The download was corrupted, because the stderr (Standard Error) output from PHP became mixed in with the download data.
Ask that open_basedir restrictions be turned off.
September 26, 2011 at 3:37 am #37010SimoneFitzyMemberThanks for that. I just contacted my hosting provider and they said they can’t turn off the open_basedir restrictions because of a shared hosting environment!
It all just seems too much for me to now find a new hosting provider – is there any other way around this? Would my files have issues if I just didn’t check that box and let the users see the url?
Thanks again
Simone
September 26, 2011 at 8:22 am #37011adminKeymasterTry one of the other options explained here:
http://www.tipsandtricks-hq.com/ecommerce/selling-large-files-with-wp-estore-796
September 26, 2011 at 10:53 am #37012wzpModeratorYou can try each of the 3 “URL Conversion Option” settings, but I don’t think it will work.
The message in the settings screen is “safe to ignore,” because it only triggers the error as a result of trying to “pre-qualify” the correct location of the download.php file.
The error that occurs when using the download link occurs when the script tries to figure out the location of the download file in relationship to the WordPress installation directory. When the error is triggered, output is sent to the buyer’s browser; which in turn corrupts any further download attempt; because the extra information messed up the download stream.
It may be possible to get around this by manually figuring out the information the download script needs, and then hard coding it into the script. However, doing so has its own set of consequences…
1. Every time you update the plugin, you must re-apply the changes.
2. You are on a shared virtual server. I am concerned, because you also mentioned the size of your files, the server may not be able to keep up with the performance demands required.
While the second consequence can be gotten around by using the native Amazon S3 integration feature, that option would not be available if you decided to use the PDF Stamper; because it can only stamp locally hosted files. If you are not ever going to use the PDF Stamper, then only the first consequence would apply.
Bottom line; if you are really “in love” with your current hosting provider, a “hack” can be done; but in the long run, it will be an unhappy marriage.
Of course, you could also uncheck the downloadable box, and not use encrypted download links. The only consequence is that buyers, if they are so inclined, could engage in link sharing. But that is a risk that only you can determine.
-
AuthorPosts
- You must be logged in to reply to this topic.