download link

[bluseer]

Hi

Im bluseer..I want to create a download link on my confirmation page for every item that a client purchases..I know nothing about .asp or .php..but I can learn :-))..would it be better to provide an email with user/password with the download link included..
which is more secure?..thanks for your help

Bluseer

[wiffles]

A confirmation email would be a good idea, but I wouldn't use that as authentication. The email can contain a direct link to the confirmation page, provided that the user still has to log in.

I take it the download link goes to what the client purchases. In this case, you should make sure that hotlinking to that won't provide the file to anyone. Best approach is to add a hidden form on the confirmation page (which the user has already logged into) containing a unique id of some kind, and the user submits this form to the download page to access the file.

Yes, you will need something serverside like PHP or ASP to do this. If you're dealing with online purchasing then SSL is a must.