woothemes/woocommerce — Issue #497: Make virtual download secure
Author: midnightdonkey
Created: 2012-01-14 08:09:30+00:00
State: open

Hey there - first off, if this isn't the right place to post this, delete it =)

Was just testing to see what would happen if someone copied the URL to my downloadable product from their "My Account" page. Within a new browser, not logged in, I was able to download the file with the URL..

Is there something I need to add to .htaccess or something to make it a secure download? Don't like the idea of a link being passed around.

Thanks..