kathkirtt
Karma: 0
|
direct download links - "illegal download attempt" - 2007/10/10 14:48
hi all!
i'm having continuing problems with direct links to my uploaded files.
what i want is this:
- i upload a file via the joomla front end / remository upload feature
- i link to that file in a way taht it directly gets downloaded after i click that link (rather than opening a new window "thanks for downloading")
what i get is this:
- after about 24 hours that direct link stops working correctly, all i get is "illegal download attempt"
how i workaround so far:
- my links show the "thanks for downloading" page, and then start downloading
example urls:
http://aaa.com/index.php?option=com_remository&Itemid=139&func=startdown&id=140
- works
- shows "thanks for downloading" page
http://aaa.com/index.php?option=com_remository&Itemid=139&func=download&id=140&chk=88c8c5ae68077c201043d6deee1f2560&no_html=1
- works temporarily only
- starts direct download - well for a while.
what i tried so far:
- tweaked the maximum download limits per user / file / day to 10000 in the remository config
- hacked the file components/com_remository/p-classes/remositoryFile.php
as described elsewhere (google for 'SUBDATE INTERVAL 24 HOUR)
both without success.
any help from you guys wuld be greatly appreciated. thanks in advance!
my tech info:
- joomla 1.0.13
- remository 3.42
|
|
|
| | Sorry, you do not currently have permission to write here. |
tchernopuss
Karma: 0
|
Re:direct download links - "illegal download attem - 2007/10/13 15:55
I got Joomla 1.0.11 with Remository 3.42 and Quickdown 2.1
If i run through the files tree of Remository, download is OK. But if I use Quickdown, I receive a fine "Illegal download attempt" too. I tried to find a solution, but none came... Please help
|
|
|
| | Sorry, you do not currently have permission to write here. |
ignos
Karma: 0
|
Re:direct download links - "illegal download attem - 2007/10/28 13:15
Hey i have the same problem. I make a direct link from a download after 24 hours the link will be killed- message : Illegal download attempt
I change in components/com_remository/p-classes/remositoryFile.php
the SUBDATE INTERVAL 24 HOUR to more and less month; day; hour; but withouth success.
Someone any solution 
|
|
|
| | Sorry, you do not currently have permission to write here. |
kathkirtt
Karma: 0
|
Re:direct download links - "illegal download attem - 2007/10/28 22:32
ok, what i found out so far is:
- tuning the SUBDATE property to days or even years does the contrary of what we want: it even makes the download limit duration stricter, resulting in something like "you can't download more than X files in Y years"
- the whole attempt of pointing to the direct link won't lead to success since it simply seems to be some kind of temp. link / session thing...
- /maybe/ someone can find out if it helps getting rid of the file version # in the filenames, and then linking to the actual file in the file system (presuming we're not using db for storage...)
good night,
benjamin 
|
|
|
| | Sorry, you do not currently have permission to write here. |
ignos
Karma: 0
|
Re:direct download links - "illegal download attem - 2007/11/18 17:38
*push*
maybe someone can help??
|
|
|
| | Sorry, you do not currently have permission to write here. |
admin
Karma: 98
|
Re:direct download links - "illegal download attem - 2007/11/18 19:00
Remository is DESIGNED to avoid the possibility of permanent, direct download links. If you create such links, there is absolutely nothing to stop someone creating their own file repository, using YOUR files! Nobody would be aware that the files were coming from your site, except that you would be paying for the bandwidth!
Since so many people ask about this, I'll consider making it an option some time, but it is asking for piracy of your files.
Martin Brampton aka Counterpoint
http://aliro.org
http://black-sheep-research.com |
|
|
| | Sorry, you do not currently have permission to write here. |
vixmoa
Karma: 0
|
Re:direct download links - "illegal download attem - 2008/02/07 09:14
Then, how can we link a remository file inside an article?
Remository should detect that is the same IP.
If direct link doesn't works nor Qickdown? 
|
|
|
| | Sorry, you do not currently have permission to write here. |
admin
Karma: 98
|
Re:direct download links - "illegal download - 2008/02/07 09:20
QuickDown will give you a link, or for that matter you can use the download link produced by Remository in the lists of files. But it isn't a direct link.
Why not? Because if you offer a direct link ANYWHERE then it is wide open to abuse since anyone can use it to make YOUR files available from THEIR sites at no cost to them in bandwidth.
It is not safe to rely on IP addresses as you could have problems both ways - refusing legitimate downloads and allowing illegitimate ones - IP addresses can be faked, proxied, etc.
But if you really want to make files freely available, it isn't too hard to modify Remository to do that.
Post edited by: counterpoint, at: 2008/02/07 09:21
Martin Brampton aka Counterpoint
http://aliro.org
http://black-sheep-research.com |
|
|
| | Sorry, you do not currently have permission to write here. |
ignos
Karma: 0
|
Re:direct download links - "illegal download - 2008/03/25 17:43
But if you really want to make files freely available, it isn't too hard to modify Remository to do that.
i want it really, can you modify for me. thank you for you hard no-commercial work.
|
|
|
| | Sorry, you do not currently have permission to write here. |
kenyoung
Karma: 0
|
Re:direct download links - "illegal download - 2009/06/25 08:15
Could someone tell me specifically what function I need to call to get a direct link to a file? $file -> basicDownloadLink($autodown) returns a link that is not quite direct. What I'm trying to do with my repository absolutely requires direct links and I'm aware of the potential issues of users linking directly to my files. 
Specifically, I'm looking for something that I could swap directly into line 230 of remositoryFileInfoHTML.php. Hopefully it's that simple, if not, please tell me where else I can make a change.
Post edited by: kenyoung, at: 2009/06/25 08:17
|
|
|
| | Sorry, you do not currently have permission to write here. |
admin
Karma: 98
|
Re:direct download links - "illegal download - 2009/06/25 21:52
I'm not certain, the code gets quite complex and its whole aim is to avoid direct downloading!
But I suggest trying modifications in ../com_remository/p-classes/remositoryFile.php around lines 376 to 384, the basicDownloadLink method. You could change it to:
| Code: |
public function basicDownloadLink ($autodown) {
// Force autodown so as to get direct download links
$autodown = true;
if
($autodown) $function = 'download';
else $function = 'startdown';
if
($this->islocal AND $autodown) $fname = $this->realname;
else $fname = null;
$repository = remositoryRepository::getInstance();
$downlink = $repository->
RemositoryBasicFunctionURL($function,$this->id, null, null, null, $fname);
return
$downlink;
}
|
You still won't get a permanent link, the link will only be valid for about a day before the check code changes.
Martin Brampton aka Counterpoint
http://aliro.org
http://black-sheep-research.com |
|
|
| | Sorry, you do not currently have permission to write here. |
bujanga
Karma: 0
|
Re:direct download links - "illegal download - 2009/09/20 23:25
Its not really that complex. The download link code is obfuscated by MD5 but the relevant part is created by the function makeCheck() in the file p-classes/remositoryRepository.php. Here is a breakdown:
($this->Time_Stamp.$interface->getCfg('absolute_path').date('md').$id.$func);
$this->Time_Stamp =
a UNIX timestamp returned by time()
$interface->getCfg('absolute_path') =
the absolute path to the storage location of Remository documents
date('md') =
the date in month/day format
$id =
Remository document ID
$func =
Set to download to allow direct download
For my own purposes, I made some adjustments to QuickDown to allow inline direct downloads from an article. If you are interested in more information, see my blog at http://dvector.com/oracle/2009/09/20/remository-inline-direct-download/
Enjoy
|
|
|
| | Sorry, you do not currently have permission to write here. |
conductorchris
Karma: 0
|
Re:direct download links - "illegal download attempt" - 2010/01/07 18:22
We are using remository for the website of the town of Wendell, Massachusetts, a small community of 860 people total (wendellmass.us). We use it for zoning permits, building permits, the brochure of the town conservation area and so on -- documents for which we have no concerns about piracy and in fact would love direct links. In fact we changed the file structure so that pdf files could be viewed directly without even downloading. But remository is very useful to us because some files are too big to view directly in the browser, and even more critical, it allows folks from the town to upload their own documents.
I just thought I'd share this as it occurs to me we may have rather a different model than some and you might want to know and know why the download limit doesn't matter to us. In our case we're just going to set it to a higher number and be done with it. Anyone who wants to download more than 25 zoning permits is either off their rocker or building a development that is too large for this town!
So anyway, thank you Martin, for your work on this component. Being such a small town, we would not otherwise have the resources for this kind of capability
|
|
|
| | Sorry, you do not currently have permission to write here. |
|
Forum
