<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: ebook download security question</title>
	<atom:link href="http://www.markboulton.co.uk/journal/comments/ebook-download-security-question/feed" rel="self" type="application/rss+xml" />
	<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=ebook-download-security-question</link>
	<description>The Personal Disquiet of Mark Boulton</description>
	<lastBuildDate>Thu, 09 Feb 2012 18:39:01 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Nathan Rutman</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-962</link>
		<dc:creator>Nathan Rutman</dc:creator>
		<pubDate>Mon, 12 Sep 2005 21:49:55 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-962</guid>
		<description>&lt;p&gt;Mark, I did a similar thing with an ASP solution a year or so ago.&#160; Found some code that would read through a binary file and &#8220;feed&#8221; it to the web browser (ASP called it a file stream).&#160; So the user thought they were downloading thefile.asp, but it returned a content type of application/pdf and then the binary for the PDF file they requested through the query string.&#160; It worked well.&#160; And yes, you will want to store the PDF outside the web folder structure.
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Mark, I did a similar thing with an ASP solution a year or so ago.&nbsp; Found some code that would read through a binary file and &#8220;feed&#8221; it to the web browser (ASP called it a file stream).&nbsp; So the user thought they were downloading thefile.asp, but it returned a content type of application/pdf and then the binary for the PDF file they requested through the query string.&nbsp; It worked well.&nbsp; And yes, you will want to store the PDF outside the web folder structure.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Craig</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-961</link>
		<dc:creator>Craig</dc:creator>
		<pubDate>Fri, 09 Sep 2005 20:29:59 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-961</guid>
		<description>&lt;p&gt;(Here&#8217;s the &lt;a href=&quot;http://www.hotscripts.com/Detailed/46734.html&quot;&gt;Link&lt;/a&gt; for the script.)

&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>(Here&#8217;s the &lt;a href=&#8221;http://www.hotscripts.com/Detailed/46734.html&#8221;&gt;Link&lt;/a&gt; for the script.)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Craig</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-963</link>
		<dc:creator>Craig</dc:creator>
		<pubDate>Fri, 09 Sep 2005 19:39:26 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-963</guid>
		<description>&lt;p&gt;Just found this scriptwhich looks like it could be helpful in facilitating pdf sales over paypal. Requires a bit of setup but cheaper than buying a pre-made solution.
&lt;/p&gt;
&lt;p&gt;
Also, these guys offer a service similar: &lt;a href=&quot;http://payloadz.com/&quot; rel=&quot;nofollow&quot;&gt;http://payloadz.com/&lt;/a&gt;
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Just found this scriptwhich looks like it could be helpful in facilitating pdf sales over paypal. Requires a bit of setup but cheaper than buying a pre-made solution.
</p>
<p>
Also, these guys offer a service similar: <a href="http://payloadz.com/" rel="nofollow">http://payloadz.com/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mark Boulton</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-964</link>
		<dc:creator>Mark Boulton</dc:creator>
		<pubDate>Fri, 09 Sep 2005 19:01:05 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-964</guid>
		<description>&lt;p&gt;&lt;strong&gt;Ryan&lt;/strong&gt; - Thanks for that. Lookign forward to seeing it.
&lt;/p&gt;
&lt;p&gt;
&lt;strong&gt;Rob&lt;/strong&gt; - That does look like an interesting product and quite feature rich.

&lt;/p&gt;
&lt;p&gt;
I noticed on your site, you use Cafepress for your printed material. How do you find the quality of the books they produce? Also, do they offer full colour book printing for distribution in the UK? I couldn&#8217;t find any information about that anywhere.
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p><strong>Ryan</strong> &#8211; Thanks for that. Lookign forward to seeing it.
</p>
<p>
<strong>Rob</strong> &#8211; That does look like an interesting product and quite feature rich.</p>
<p>
I noticed on your site, you use Cafepress for your printed material. How do you find the quality of the books they produce? Also, do they offer full colour book printing for distribution in the UK? I couldn&#8217;t find any information about that anywhere.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mike Zornek</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-965</link>
		<dc:creator>Mike Zornek</dc:creator>
		<pubDate>Fri, 09 Sep 2005 11:23:45 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-965</guid>
		<description>&lt;p&gt;You could ask &lt;a href=&quot;http://pragmaticprogrammer.com/&quot; rel=&quot;nofollow&quot;&gt;Dave&lt;/a&gt; how they do it. I bought a PDF book from them and they emailed me a special unique url to download it after it was prepared. Prepared seemed to be customizing the PDF with a &#8220; Prepared exclusively for Michael D Zornek&#8221; at the footer of each page. Other than that though no DRM (which is important for me).

&lt;/p&gt;
&lt;p&gt;
&lt;a href=&quot;http://www.takecontrolbooks.com&quot; rel=&quot;nofollow&quot;&gt;Adam&lt;/a&gt; also sells PDFs online and might be able to give some advice.
&lt;/p&gt;
&lt;p&gt;
Good luck!
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>You could ask <a href="http://pragmaticprogrammer.com/" rel="nofollow">Dave</a> how they do it. I bought a PDF book from them and they emailed me a special unique url to download it after it was prepared. Prepared seemed to be customizing the PDF with a &#8220; Prepared exclusively for Michael D Zornek&#8221; at the footer of each page. Other than that though no DRM (which is important for me).</p>
<p>
<a href="http://www.takecontrolbooks.com" rel="nofollow">Adam</a> also sells PDFs online and might be able to give some advice.
</p>
<p>
Good luck!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob Babcock</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-966</link>
		<dc:creator>Rob Babcock</dc:creator>
		<pubDate>Fri, 09 Sep 2005 09:06:51 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-966</guid>
		<description>&lt;p&gt;I use &lt;a href=&quot;http://www.vibralogix.com/linklokipn/&quot; rel=&quot;nofollow&quot;&gt;LinkLok for Payapl IPN&lt;/a&gt; to handle the secure download of the content I sell on my site. The developer is very responsive and I&#8217;m very pleased with the product.
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>I use <a href="http://www.vibralogix.com/linklokipn/" rel="nofollow">LinkLok for Payapl IPN</a> to handle the secure download of the content I sell on my site. The developer is very responsive and I&#8217;m very pleased with the product.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan Campbell</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-967</link>
		<dc:creator>Ryan Campbell</dc:creator>
		<pubDate>Fri, 09 Sep 2005 08:49:00 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-967</guid>
		<description>&lt;p&gt;Sounds good - we should be doing testing shortly, and then I&#8217;ll have some more concrete stuff to give you.
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Sounds good &#8211; we should be doing testing shortly, and then I&#8217;ll have some more concrete stuff to give you.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mark Boulton</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-968</link>
		<dc:creator>Mark Boulton</dc:creator>
		<pubDate>Fri, 09 Sep 2005 05:03:52 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-968</guid>
		<description>&lt;p&gt;&lt;strong&gt;Ryan Heneise&lt;/strong&gt; - Thanks Ryan, well I&#8217;m not the most adept programmer in the world so actually implimenting this theory of yours might prove tricky! ;). Thanks for the tips though.
&lt;/p&gt;
&lt;p&gt;
&lt;strong&gt;Ryan Cambell&lt;/strong&gt; - Hey Ryan. I&#8217;d forgotton you were going through something similar actually. This sounds exactly what I&#8217;m after. Let me know when you&#8217;re done and I&#8217;ll try and get to work on it. Not so sure how to implement al this talk of hashes and things&#8230;

&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p><strong>Ryan Heneise</strong> &#8211; Thanks Ryan, well I&#8217;m not the most adept programmer in the world so actually implimenting this theory of yours might prove tricky! ;). Thanks for the tips though.
</p>
<p>
<strong>Ryan Cambell</strong> &#8211; Hey Ryan. I&#8217;d forgotton you were going through something similar actually. This sounds exactly what I&#8217;m after. Let me know when you&#8217;re done and I&#8217;ll try and get to work on it. Not so sure how to implement al this talk of hashes and things&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan Heneise</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-969</link>
		<dc:creator>Ryan Heneise</dc:creator>
		<pubDate>Fri, 09 Sep 2005 03:23:57 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-969</guid>
		<description>&lt;p&gt;Just thought I&#8217;d put a little disclaimer on my comment above&#8230; I haven&#8217;t tried it yet, so I don&#8217;t know if it would actually work. It&#8217;s probably one of a zillion ways to do this.
&lt;/p&gt;
&lt;p&gt;

I&#8217;d be really interested to hear what you end up doing.
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Just thought I&#8217;d put a little disclaimer on my comment above&#8230; I haven&#8217;t tried it yet, so I don&#8217;t know if it would actually work. It&#8217;s probably one of a zillion ways to do this.
</p>
<p>I&#8217;d be really interested to hear what you end up doing.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan Campbell</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-971</link>
		<dc:creator>Ryan Campbell</dc:creator>
		<pubDate>Fri, 09 Sep 2005 02:56:10 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-971</guid>
		<description>&lt;p&gt;Hey Mark - I recently made a similar post in the 9rules Site Suggestions forum. The guys had some good advice.
&lt;/p&gt;
&lt;p&gt;
I&#8217;m in the same boat and stepping through the process. Basically, I am trying to direct users to a secure pdf download. Paypal returns to our site, and a page process the download. I started with the following code:
&lt;/p&gt;
&lt;p&gt;
$dir=&quot;yourdir/&quot;;
&lt;/p&gt;
&lt;p&gt;

$file=$dir.&quot;filename.psd&quot;;
&lt;br /&gt;
header(&quot;Content-type: application/force-download&quot;);
&lt;br /&gt;
header(&quot;Content-Transfer-Encoding: Binary&quot;);
&lt;br /&gt;
header(&quot;Content-length: &#8220;.filesize($file));
&lt;br /&gt;
header(&quot;Content-disposition: attachment; filename=\&quot;haha.psd\&quot;&quot;);
&lt;br /&gt;
readfile&#040;&quot;$file&quot;&#041;;

&lt;/p&gt;
&lt;p&gt;
This works pretty well because you can hide the path and filename from the user, so the only way to access the file is some good guessing. It is not 100% safe though, so I am in the process of trying to implement what they suggested - keeping the file outside of the web file structure.
&lt;/p&gt;
&lt;p&gt;
Anyways, once my setup is finished I will let you know. You are more than welcome to use my code. The only difference with mine is that we have a database with username/passwords so it is easy to verify. In yours, some type of hash code will need to be stored just as Ryan suggested.
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Hey Mark &#8211; I recently made a similar post in the 9rules Site Suggestions forum. The guys had some good advice.
</p>
<p>
I&#8217;m in the same boat and stepping through the process. Basically, I am trying to direct users to a secure pdf download. Paypal returns to our site, and a page process the download. I started with the following code:
</p>
<p>
$dir=&#8221;yourdir/&#8221;;
</p>
<p>$file=$dir.&#8221;filename.psd&#8221;;<br />
<br />
header(&#8220;Content-type: application/force-download&#8221;);<br />
<br />
header(&#8220;Content-Transfer-Encoding: Binary&#8221;);<br />
<br />
header(&#8220;Content-length: &#8220;.filesize($file));<br />
<br />
header(&#8220;Content-disposition: attachment; filename=\&#8221;haha.psd\&#8221;");<br />
<br />
readfile&#40;&#8221;$file&#8221;&#41;;</p>
<p>
This works pretty well because you can hide the path and filename from the user, so the only way to access the file is some good guessing. It is not 100% safe though, so I am in the process of trying to implement what they suggested &#8211; keeping the file outside of the web file structure.
</p>
<p>
Anyways, once my setup is finished I will let you know. You are more than welcome to use my code. The only difference with mine is that we have a database with username/passwords so it is easy to verify. In yours, some type of hash code will need to be stored just as Ryan suggested.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan Heneise</title>
		<link>http://www.markboulton.co.uk/journal/comments/ebook-download-security-question#comment-970</link>
		<dc:creator>Ryan Heneise</dc:creator>
		<pubDate>Fri, 09 Sep 2005 02:21:50 +0000</pubDate>
		<guid isPermaLink="false">http://wordpress.markboultondesignhosting.com/2005/09/ebook-download-security-question/#comment-970</guid>
		<description>&lt;p&gt;There is a similar technique posted on Signal vs. Noise called &#8220;URL or Username and Password?&#8221;, posted 30 Aug 2005. (Your comment form won&#8217;t let me post the link.)
&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>There is a similar technique posted on Signal vs. Noise called &#8220;URL or Username and Password?&#8221;, posted 30 Aug 2005. (Your comment form won&#8217;t let me post the link.)</p>
]]></content:encoded>
	</item>
</channel>
</rss>

