Constructive Advice on E-shop Product security

dcjones

Hi All,

I have a site which will be offering a on line service. The basics are:

Customer goes to the site, clicks on the service button, gets directed to ClickBank, pays for the service, gets redirected to the service page, uses the service and exits out of the page.

How do I stop a customer just typing in the URL to the service page and using the service for FREE.

Can anyone or more give some constructive help and advise.

Kind regards, keep safe and well.

Dereck

AstroTeg

Depends on the service.

User authentication and validation would work. User pays. They get an ID and password (or they set the password). They use the service. They leave before the service is up, they can get back in. Otherwise you validate them and find they have used up their service and they're done.

Trick is without knowing the service it'll be difficult to find a method which will suit your needs and the needs of the users.

dcjones

Hi and thansk for your reply

The service which I am offering is a language translation service which will take place on line.

When the user gets to the translation page (after payment) they can then enter the text or paste & copy, click a link button and another page opens containing the original text and the translation.

What do you think is the best method.

Kind regards, keep safe and well

Dereck

AstroTeg

Well, you need to find a way to expire the link. That could mean deleting the output file. Or that could mean putting some validation on the output page to ensure that output is good only for a certain time frame. I would think you'll need to track the user some how (either with sessions or cookies).

dcjones

Hi,

Thanks for your comments.

I will look into sessions using TTL, if I can get my head round it.

Thanks

Dereck

dcjones

Hi again,

I am using the following until I can workout a better way.

           /* Anti-leech bandwidth protecter by Corey Milner, [url]http://www.odey.com.[/url] 
           Turn the refererring URL into a variable */

$from = getenv("HTTP_REFERER");

           /* Check to see if the URL in the variable is a valid referrer. Add the page URL which you would like                               people to arrive from here. */

if ($from != "http://www.yoursite.com/validpage.htm")

           /* If the URL is valid, page loads now */ 

           /* If URL is invalid the following error message and proper link appears, enter your custom error                             message and a hyperlink to the valid URL you entered above here*/

{print(" Sorry you have tried to link to a page which does not accept visitors directly. <br>
<a href=http://www.yoursite.com/validpage.htm>CLICK HERE</a> to enter");

           /* Prevent the rest of the page from loading */

exit;}

Regards

Dereck