Re: [wdvltalk] secure download for ebook

2008-08-05 Thread David Precious

joseph harris wrote:
I am starting at the beginning again with planning a site, and again 
this will be to do with selling a book, but it will also contain a lot 
of other material and some sort of forum or, more likely, a 'questions 
answered' newsletter.


I do not favour any DRM, but don't want the download page exposed or 
available to non-payers. I am reluctant to think HTTPS, though I know 
how sensible it is. But I was thinking that maybe [I am using PayPal for 
payments] there was a way of linking the PayPal transaction number to 
the download.


This is a fairly common thing to want to do, and isn't that hard to 
achieve.  Googling for "sell digital products" will find you various 
pre-written solutions which may be of use to you.


I'd recommend checking out osCommerce first - it's a popular, free, 
open-source shopping cart which supports digital products:

http://www.oscommerce.com/solutions/oscommerce

Others include:
http://www.zen-cart.com/ (free again)


Given programming experience, writing a custom system to do this 
wouldn't be all that hard, either.  (But if you choose to do it 
yourself, learn secure coding practices first or have someone 
knowledgeable check over the code before it goes live; when you're 
dealing with E-commerce stuff you don't really want to be making mistakes :)



I am again looking at PHP/MySQL since I should be able to remember it 
fairly easily, though I might stick to CSS1, since the emphasis has to 
be on writing and marketing.


I fail to see the relevance between PHP+MySQL and CSS?

Cheers

Dave P




 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
  Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


RE:[wdvltalk] secure download for ebook

2008-08-05 Thread Furry, Tim
Joseph wrote...
I do not favour any DRM, but don't want the download page exposed
or available to non-payers. I am reluctant to think HTTPS, though
I know how sensible it is. But I was thinking that maybe [I am
using PayPal for payments] there was a way of linking the PayPal
transaction number to the download.
[...]
I am again looking at PHP/MySQL since I should be able to
remember it fairly easily, though I might stick to CSS1, since
the emphasis has to be on writing and marketing.

Joseph,
I don't know if this will work in your situation or not, but I've had good luck 
using two different methods of restricting document access.

1. Put the content in the database.  Your regular PHP files can check 
authentication and/or authorization, and if the appropriate credentials are 
submitted, you can open a new browser window, set the MIME type for the 
content, and copy the content to the new window using PHP.  This is a good 
solution for when you don't have access to the server's file system outside 
your web space (as in a hosted site).

2. Put the content in a folder that's not in a web-servable location.  You can 
use PHP the same way to check credentials and then open and copy the file 
line-by-line to a browser, but the file itself should not be directly servable. 
 This is good for when you run your own servers or if you're accessing content 
on other machines remotely.

Either way, you'll want your PHP to be pretty stout to protect the content, but 
this way you don't have to worry about people hacking the URLs and finding the 
files.

Tim

 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
   Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


Re: [wdvltalk] secure download for ebook

2008-08-08 Thread joseph harris


From: "David Precious"

joseph harris wrote:

..


This is a fairly common thing to want to do, and isn't that 
hard to achieve.  Googling for "sell digital products" will 
find you various pre-written solutions which may be of use to 
you.


I'd recommend checking out osCommerce first - it's a popular, 
free, open-source shopping cart which supports digital 
products:

http://www.oscommerce.com/solutions/oscommerce

Others include:
http://www.zen-cart.com/ (free again)


Yes, thanks. Part of the reminders I need.




Given programming experience, writing a custom system to do 
this wouldn't be all that hard, either.  (But if you choose to 
do it yourself, learn secure coding practices first or have 
someone knowledgeable check over the code before it goes live; 
when you're dealing with E-commerce stuff you don't really want 
to be making mistakes :)


Love to, but don't have time this year [;-)] to go through more 
big learning curves.





I am again looking at PHP/MySQL since I should be able to 
remember it fairly easily, though I might stick to CSS1, since 
the emphasis has to be on writing and marketing.


I fail to see the relevance between PHP+MySQL and CSS?

Cheers

Dave P


Ah...  I could have phrased that better. The link is they are for 
the same site; it was CSS1 versus the unstated CSS2.


Joseph 



 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
  Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


Re: [wdvltalk] secure download for ebook

2008-08-08 Thread David Precious
On 08/08/2008 11:33 AM, joseph harris wrote:
 > jh writes:  This is the key for me. Make it easy for payers but
> impenetrable for others.

Nothing is impenetrable - there's no such thing as absolute security :)


 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
   Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


Re: [wdvltalk] secure download for ebook

2008-08-08 Thread joseph harris

From: "David Precious"


On 08/08/2008 11:33 AM, joseph harris wrote:
> jh writes:  This is the key for me. Make it easy for payers 
> but

impenetrable for others.


Nothing is impenetrable - there's no such thing as absolute 
security :)




;-( Just as I was starting to feel cheerful about it... 
Initially I might do a very simple paypal button from a blog 
page - since it is an ebook I can fulfil by email in the first 
instance. It is very UK, so the 24 hour availability is not 
vital. Less than perfect I know, but I don't want to spend a lot 
of time setting anything up just now.


When I get some movement I can move to phase two - as yet fluid.

Joseph 



 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
  Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


Re: [wdvltalk] secure download for ebook

2008-08-08 Thread David Precious
On 08/08/2008 02:55 PM, Cheryl D Wise wrote:
> Another option is to zip the pdf and put a password on the zip fits. Find
> the password with the payment confirmation. That is about as easy as it
> gets. 


Just bear in mind that cracking ZIP file passwords is rather easy.
Especially if they happen to be disctionary words!

 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
   Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


RE: [wdvltalk] secure download for ebook

2008-08-08 Thread Cheryl D Wise
Still if Joseph doesn't wont to require a login that may be affront espials
a random creation of numbers, letters and punctuation. There are also abode
tools that require on unlocking code generated from a registered name. a
friend uses one from Armand Morin but I forget the name of it. Drawback is
that the results books only work on Windows. The sends a link to a password
protected download folder for a pdf version for those who tell here they are
using a Mac or other non-windows OS.

Cheryl D Wise 
MS MVP Expression 

Registration now open for Expression, CSS and FrontPage Migration Classes
at: http://starttoweb.com  
Beginner tutorial: Creating a basic website video tutorial -
http://by-expression.com/media/p/1300.aspx 

-Original Message-
From: David Precious 

On 08/08/2008 02:55 PM, Cheryl D Wise wrote:
> Another option is to zip the pdf and put a password on the zip fits. Find
> the password with the payment confirmation. That is about as easy as it
> gets. 


Just bear in mind that cracking ZIP file passwords is rather easy.
Especially if they happen to be disctionary words!



 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
   Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


Re: RE:[wdvltalk] secure download for ebook

2008-08-08 Thread joseph harris

From: "Furry, Tim"
...
Joseph,
I don't know if this will work in your situation or not, but I've 
had good luck using two different methods of restricting document 
access.


1. Put the content in the database.  Your regular PHP files can 
check authentication and/or authorization, and if the appropriate 
credentials are submitted, you can open a new browser window, set 
the MIME type for the content, and copy the content to the new 
window using PHP.  This is a good solution for when you don't 
have access to the server's file system outside your web space 
(as in a hosted site).


JH writes: Yes,that appeals.  Bit of rust to scrape off before 
I'm fully clear, but I recall a while back Cheryl recommended 
that for an earlier site of mine.


2. Put the content in a folder that's not in a web-servable 
location.  You can use PHP the same way to check credentials and 
then open and copy the file line-by-line to a browser, but the 
file itself should not be directly servable.  This is good for 
when you run your own servers or if you're accessing content on 
other machines remotely.


JH writes: Yes, that makes sense too. This is a pdf so I'm not 
sure how well it would fit this. But  it might be good for other 
ideas ahead.


Either way, you'll want your PHP to be pretty stout to protect 
the content, but this way you don't have to worry about people 
hacking the URLs and finding the files.


Tim

jh writes:  This is the key for me. Make it easy for payers but 
impenetrable for others.


Joseph 



 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
  Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


RE: RE:[wdvltalk] secure download for ebook

2008-08-08 Thread Cheryl D Wise
Another option is to zip the pdf and put a password on the zip fits. Find
the password with the payment confirmation. That is about as easy as it
gets. 

Cheryl D Wise 
MS MVP Expression 

Registration now open for Expression, CSS and FrontPage Migration Classes
at: http://starttoweb.com  
Beginner tutorial: Creating a basic website video tutorial -
http://by-expression.com/media/p/1300.aspx 




 • The WDVL Discussion List from WDVL.COM • 
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
   Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

  http://www.wdvl.com  ___

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.