woothemes/woocommerce — Issue #206: Upload folder for downloadable products
Author: DanielBakovic
Created: 2011-11-16 10:04:52+00:00
State: open

omg, I'm spamming here :D

There is a big file protection issue. The problem is that the files for downloadable products are uploaded to the standard wp upload directory and everyone how knows the file location or brute force the right file location is able to download the files without having to purchase the items.

Therby I would suggest to create a 'file' folder within the upload directory and to store alle the downloadabale files there. Then we could use htaccess to protect the folder and only the woocommerce_download_product function could access the files.

Best regards,
Daniel