“security token failure” message

[MarionLorence]

I am using nice downloads on my Joomla site. My file are in the default folder......./home/myDomain/public_html/administrator/components/com_nicepaypaldownloads/files I did not do the Securing Your Files section of your directions. Is this step critical?
Buyer receives the download link but is them taken to “security token failure” page which requires a password before proceeding to the file they want. How can get the file page with just 1 click on the link?

Marion

[Michael]

I am using nice downloads on my Joomla site. My file are in the default folder......./home/myDomain/public_html/administrator/components/com_nicepaypaldownloads/files I did not do the Securing Your Files section of your directions. Is this step critical?

Yes, it is important to follow the security steps in my set up instructions. If you do not secure your files, then anyone who knows where they are stored can download them without making a payment. However, the fact that you have not secured your files is NOT related to the "security token failure" issue.

Buyer receives the download link but is them taken to “security token failure” page which requires a password before proceeding to the file they want. How can get the file page with just 1 click on the link?

“security token failure” that's an odd error. The Nice PayPal Downloads does not use any security tokens. You can try to turn off the anti-leeching (Administrator>>Components>>Nice PayPal Downloads>>Settings). But, I doubt that will resolve the issue. This sound more like an internal server issue to me. I recommend that you contact your hosts tech support and explain that when you link to your site using certain URLs, that you receive the error. You should also include one of the links that causes this error to happen.

Let me know what they tell you and let me know if you need further assistance.

~ Best regards

[MarionLorence]

I tried this test......... www.myDomain.com/administrator/componen ... oads/files
A window pops up that says......
Authentication Required. A username and password are being requested by http:// mydomainname.com. The site says "files".
I clicked cancel on the window and then get this message........

Authorization Required

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Anti-leeching is turned off.

[Michael]

Hi,

A window pops up that says......
Authentication Required. A username and password are being requested by http:// mydomainname.com. The site says "files".
I clicked cancel on the window and then get this message........

Authorization Required

This sounds like you have protected the file folder with htaccess. This is good! It means that people who do not pay for your download files will not be able to access them. People who do pay for your files will get an email with a download link. The download link will bring them to a download page which is created by the Nice PayPal Downloads extension. On that page there will be a download button. The download button will be the only access the buyer has to the download file, which is exactly what you want.

~ Best regards

[MarionLorence]

OK.......... I protected my files with your new, simplified instruction in the documentation regarding htaccess.
I did the following to protect my files from being viewed in the browser..........
1. Created a file named "htaccess.txt" in notepad and enter the following line of text............ deny from all
2. Upload the htaccess.txt file to http://www.mydomaine.com/administrator/ ... oads/files and then changed the name of the remote htaccess.txt file to .htaccess
Then I created a Download Profile for each pdf file in the files directory and the process works perfectly.

I also deleted some of my previous efforts in my server cPanel where files had been created to protect the directory that may have been interfering with the Nice PayPalDownload process.

Thank you. It works!

[Michael]

Hi Marion,

You're welcome! This is great news! I happy that I was able to help you get your files secured properly.

~ Enjoy

[MarionLorence]

It was working perfectly and now it does not. I have tried live chat at the server with no help. Here is the link in my email......
To download your file please click the link below, or copy and paste it into your browser's address bar.

%https://slmp-550-13.slc.westdc.net:2083/cpsess9243259176/frontend/x3/filemanager/showfile.html?file=how+to+resolve+conflict.pdf&fileop=&dir=%2Fhome%2Fhopeken5%2Fpublic_html%2Fadministrator%2Fcomponents%2Fcom_nicepaypaldownloads%2Ffiles&dirop=&charset=&file_charset=&baseurl=&basedir=%

Result is.............. HTTP error 401 Invalid security token ............... this is a page where I am required to log into the server cpanel. Please help. Marion Lorence

[Michael]

Hi Marion,

The download link that you sent looks very strange. It doesn't look anything like the Nice Paypal Download links.

Your link

Code: Select all

https://slmp-550-13.slc.westdc.net:2083/cpsess9243259176/frontend/x3/filemanager/showfile.html?file=how+to+resolve+conflict.pdf&fileop=&dir=%2Fhome%2Fhopeken5%2Fpublic_html%2Fadministrator%2Fcomponents%2Fcom_nicepaypaldownloads%2Ffiles&dirop=&charset=&file_charset=&baseurl=&basedir=

A Nice PayPal Downloads link

Code: Select all

http://yourdomain.com/index.php?option=com_nicepaypaldownloads&nd=d&itm=24&tx=O8Y097U7493022

I can't even begin to guess what has happened to mangle the link generation so badly. Did you change anything about your site? Add other extensions? Add a security certificate? Did your host update the server?

The Nice PayPal Downloads extension uses core Joomla functionality to retrieve your Joomla site's URL. The extension then adds the following "index.php?option=com_nicepaypaldownloads&nd=d&itm= &tx= " which is hard coded. The itm= value and the tx= value are added dynamically from PayPal's IPN message. So, how all of the extra bits got added to the download URL has me stumped. I mean:

/cpsess9243259176/frontend/x3/filemanager/showfile.html?file=how+to+resolve+conflict.pdf&fileop=&dir=%2Fhome%2Fhopeken5%2Fpublic_html%

The above portion doesn't look like a Joomla URL at all.

Are all of the links on your site, menus & others, still working correctly?

~ Best regards

[MarionLorence]

I can't even begin to guess what has happened to mangle the link generation so badly. Did you change anything about your site? >>>>>>>>>>>>>> no
Add other extensions? >>>>>>>>>>>>>>>> no
Add a security certificate? .......... no
Did your host update the server?>>>>>>>>>>>>>The server did do some kind of update.

The Nice PayPal Downloads extension uses core Joomla functionality to retrieve your Joomla site's URL. The extension then adds the following "index.php?option=com_nicepaypaldownloads&nd=d&itm= &tx= " which is hard coded. The itm= value and the tx= value are added dynamically from PayPal's IPN message. So, how all of the extra bits got added to the download URL has me stumped. I mean:

/cpsess9243259176/frontend/x3/filemanager/showfile.html?file=how+to+resolve+conflict.pdf&fileop=&dir=%2Fhome%2Fhopeken5%2Fpublic_html%

The above portion doesn't look like a Joomla URL at all.

>>>>>>>>>>>>>>>Here is how I got the url. In my cpanel file manager, I found the file and right clicked>chose view file. When the pdf came up, I copied the url and pasted it into the download profile in the appropriate section. I know the url is not right but do not understand how to find the right path. Is the any way to test this?

Are all of the links on your site, menus & others, still working correctly? >>>>>>>>>>>>> Yes. Everything else works fine.

One other thing. I noticed in my cpanel files, there are 2 files in the root folder called htaccess.txt and htaccess. (not my doing) I am wondering if those are blocking the path to the files

[Michael]

Ah, I have the solution (I think).

Use the following exact bit of text, where you want the download link to appear in your email notification.

Code: Select all

%downloadlink%

%downloadlink% will get replaced automatically by the extension, with the correct download link URL, before the email message is sent out. The replacement download link URL will take the buyer to a download page. On that download page, there will be a download button that the buyer can use to download the file.

~ All the best

[MarionLorence]

I followed your instruction within the download profile tab for each download and it worked perfectly.

I was thinking that I had to create an article on my site that had a url and them paste that url between the %.........% in the email message. Now I realize that I was over thinking the details on this process. Your component does all the heavy lifting.

Thank you. Marion

[Michael]

You're very welcome! I am happy to hear that you have this matter resolved.

~ Enjoy