Ajeh Posted March 4, 2003 Share Posted March 4, 2003 Also check if you have a file called: /includes/functions/downloads_controller.php Quote Link to comment Share on other sites More sharing options...
pianowoman Posted March 4, 2003 Share Posted March 4, 2003 Okay, I switched to the absolute path (no dice) and the file name and permissions are correct. Â I do have the downloads_controller.php file however there is no reference to it in the download.php file. Any thoughts? Quote Link to comment Share on other sites More sharing options...
Ajeh Posted March 4, 2003 Share Posted March 4, 2003 This is called through one of the files like application_top.php  Can you edit the orders table for order #22 and see if last_modified is blank or has what date in it?  I think your shop is configured wrong so it is not getting updated when the order happens.  If you were to go into the Admin ... Orders ... Processing ... I could most likely download that file.  I wrote that Add-on and it appears to me to be included in what you are using and not setup right. Quote Link to comment Share on other sites More sharing options...
pianowoman Posted March 4, 2003 Share Posted March 4, 2003 The last modified is NULL. I set the status to delivered in the admin, also the default setting is "processing". Quote Link to comment Share on other sites More sharing options...
Ajeh Posted March 4, 2003 Share Posted March 4, 2003 I got the download btw ... Â The Downloads Controller is misconfigured for your site. Quote Link to comment Share on other sites More sharing options...
pianowoman Posted March 4, 2003 Share Posted March 4, 2003 Ugh -- I tried taking it out as there were all those database errors (I guess since I have old files) and I just don't know what to do now. Quote Link to comment Share on other sites More sharing options...
Ajeh Posted March 4, 2003 Share Posted March 4, 2003 Your site appears to have a mixture of versions to it. Â Without looking at your site it is hard for me to say what the best way to fix this is. Â I would really need to see the files via FTP as well as your database to know which way to go here. Â It could be as simple as just updating a few files. Quote Link to comment Share on other sites More sharing options...
pianowoman Posted March 4, 2003 Share Posted March 4, 2003 Can I e-mail you at the address you used on my site? Quote Link to comment Share on other sites More sharing options...
Ajeh Posted March 4, 2003 Share Posted March 4, 2003 I dropped you a note with a better email address ... :D Quote Link to comment Share on other sites More sharing options...
pianowoman Posted March 4, 2003 Share Posted March 4, 2003 I didn't receive it, could you send it through the contact form on my site? Quote Link to comment Share on other sites More sharing options...
Ajeh Posted March 4, 2003 Share Posted March 4, 2003 Hopefully I sent that to the right place ... :D Quote Link to comment Share on other sites More sharing options...
Guest Posted April 13, 2003 Share Posted April 13, 2003 I installed version 5.3 alot easier to understand. Thank You!! Now I put my files in the download directory, is this right?? If a person knows the name of the file they can download from there bypassing the payment. I set the cmod to 777, 755 won't work just 777. How can I protect these files? Quote Link to comment Share on other sites More sharing options...
Ajeh Posted April 13, 2003 Share Posted April 13, 2003 Set /download to 755 and turn on the redirect and set /pub to 777 Quote Link to comment Share on other sites More sharing options...
Guest Posted April 13, 2003 Share Posted April 13, 2003 Linda, Did that with the 755 everything works. Unclear about turning on the redirect though. Still the file can be downloaded from the server using the URL and then the download/unreal.zip. Quote Link to comment Share on other sites More sharing options...
Ajeh Posted April 13, 2003 Share Posted April 13, 2003 Look in Admin ... Configuration ... Download ...  Enable Download - True Redirect - True  Set /download to 755 Set /pub to 777  Load files to /download  People have to get them from /pub  Now /download is safe Quote Link to comment Share on other sites More sharing options...
Guest Posted April 13, 2003 Share Posted April 13, 2003 The above is all true and it works, but an unscruplious person can still type in the URL and the download/unreal.zip and retrieve the file. I know that they do not see the actual directory that the file is located in but the possibility is still there. Am I just seeing things or is this true for you too? It could be the server I'm on?? Quote Link to comment Share on other sites More sharing options...
Ajeh Posted April 13, 2003 Share Posted April 13, 2003 I have mine configured with an .htaccess file to handle directories that do not contain indexes ...  You cannot get to my downloads even if you know the name of the file.  For example:  http://www.8thoctave.com/osc_freecall  The unreal.zip is in /download it is set to 775  I have on the redirect and /pub is set to 777  I have no passwords setup ... these are just the standard settings.  This is a brand new install with nothing touched:  http://www.8thoctave.com/osc_0412  The unreal.zip is in /download it is set to 775  I have on the redirect and /pub is set to 777  I have no passwords setup ... these are just the standard settings.  Note: a .htaccess comes with oscommerce for the /catalog/download directory.  Are you perhaps missing that file? Quote Link to comment Share on other sites More sharing options...
Guest Posted April 13, 2003 Share Posted April 13, 2003 BINGO Whew I thought I was alone in the world. Thanks so much.[/b] Quote Link to comment Share on other sites More sharing options...
Ajeh Posted April 14, 2003 Share Posted April 14, 2003 Rick ... is everything working securely for you now? Quote Link to comment Share on other sites More sharing options...
Guest Posted April 14, 2003 Share Posted April 14, 2003 Yes it is. I am not sure why the htaccess did not get in the directory but that was the problem. Thank you again for the help. Quote Link to comment Share on other sites More sharing options...
capsulas Posted April 18, 2003 Share Posted April 18, 2003 Hi Linda ! In your contribution Download Controller v3.0, you mention in the readme.txt the following file: purchase_order.php, but it?s not included in the package :!:  readme.txt === Payment Method Module Changes:/catalog/includes/modules/payment/purchase_order.php - new file  Payment Language Modules: /catalog/includes/languages/english/modules/payment/purchase_order.php - new file  Could you tell me, how can I get this file? Thanks :D Quote Link to comment Share on other sites More sharing options...
Ajeh Posted April 18, 2003 Share Posted April 18, 2003 What version snapshot do you have that you are using Downloads Controller v3.0? It's a rather old version. Â As to the payment module I must not of packaged that one with a copy and I don't think I still have a copy running around. Â You might look in the contributions as there should be one there. Quote Link to comment Share on other sites More sharing options...
capsulas Posted April 19, 2003 Share Posted April 19, 2003 Hello Linda ! I?m using snapshot: Oct-23-2002 4:08, this is the reason that I?m using Downloads Controller v3.0.  In fact, after the installation when I testing the funcitonallity, in the proccess of checkout the message is:  Fatal error: Call to undefined function: tep_db_perform() in /.../catalogo/checkout_process.php on line 81 :?:  Line 81 in checkout_process.php  tep_db_perform(TABLE_ORDERS, $sql_data_array);  What Can I do? Could you help me ? :) Thanks Quote Link to comment Share on other sites More sharing options...
Ajeh Posted April 19, 2003 Share Posted April 19, 2003 tep_db_perform is located in the /includes/functions/database.php and has been there for a long time. Â I looked at the file from June 2002 and it is still there back then so I am not sure why you would be missing it. Â You might check that file. Quote Link to comment Share on other sites More sharing options...
capsulas Posted April 19, 2003 Share Posted April 19, 2003 Hello Linda ! Browsing the code, not found. Let me know it is easy to include :?: something like that:  function tep_db_perform($db_query) {   return mysql_perfomr($db_query);  }  File database.php <?php /*  $Id: database.php,v 1.13 2002/04/06 15:58:28 hpdl Exp $  osCommerce, Open Source E-Commerce Solutions  http://www.oscommerce.com  Copyright (c) 2002 osCommerce  Released under the GNU General Public License */  function tep_db_connect($server = DB_SERVER, $username = DB_SERVER_USERNAME, $password = DB_SERVER_PASSWORD, $database = DB_DATABASE, $link = 'db_link') {   global $$link;   if (USE_PCONNECT == 'true') {    $$link = mysql_pconnect($server, $username, $password);   } else {    $$link = mysql_connect($server, $username, $password);   }   if ($$link) mysql_select_db($database);   return $$link;  }  function tep_db_close($link = 'db_link') {   global $$link;   return mysql_close($$link);  }  function tep_db_error($query, $errno, $error) {   die('<font color="#000000"><b>' . $errno . ' - ' . $error . '<br><br>' . $query . '<br><br><small><font color="#ff0000">[TEP STOP]</font></small><br><br></b></font>');  }  function tep_db_query($query, $link = 'db_link') {   global $$link;   if (STORE_DB_TRANSACTIONS == 'true') {    error_log("QUERY " . $query . "n", 3, STORE_PAGE_PARSE_TIME_LOG);   }   $result = mysql_query($query, $$link) or tep_db_error($query, mysql_errno(), mysql_error());   if (STORE_DB_TRANSACTIONS == 'true') {    $result_error = mysql_error();    error_log("RESULT " . $result . " " . $result_error . "n", 3, STORE_PAGE_PARSE_TIME_LOG);   }   return $result;  }  function tep_db_fetch_array($db_query) {   return mysql_fetch_array($db_query, MYSQL_ASSOC);  }  function tep_db_num_rows($db_query) {   return mysql_num_rows($db_query);  }  function tep_db_data_seek($db_query, $row_number) {   return mysql_data_seek($db_query, $row_number);  }  function tep_db_insert_id() {   return mysql_insert_id();  }  function tep_db_free_result($db_query) {   return mysql_free_result($db_query);  }  function tep_db_fetch_fields($db_query) {   return mysql_fetch_field($db_query);  }  function tep_db_input($string) {   return addslashes($string);  } ?> Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.