ProductCart E-Commerce Solutions Homepage
Forum Home Forum Home > ProductCart > Using ProductCart
  New Posts New Posts RSS Feed - Any ideas for downloadable videos?
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Any ideas for downloadable videos?

 Post Reply Post Reply Page  <12
Author
Message
Brett View Drop Down
Groupie
Groupie
Avatar

Joined: 22-April-2008
Location: Phoenix, AZ
Status: Offline
Points: 89
Post Options Post Options   Thanks (0) Thanks(0)   Quote Brett Quote  Post ReplyReply Direct Link To This Post Posted: 25-January-2013 at 3:23am
I see what you mean Sean. It sounds like the solution you came up with is much better, especially as it is more tightly integrated with productcart's handling of downloadable products.
Back to Top
Guests View Drop Down
Guest
Guest
Post Options Post Options   Thanks (0) Thanks(0)   Quote Guests Quote  Post ReplyReply Direct Link To This Post Posted: 25-January-2013 at 3:49am
Thanks, Brett.

I think this could be an interesting and easy enhancement to PC.

ProductCart is loaded with options -- some times the array of possible options is overwhelming (after years of intense use and modifying things, I still stumble around with some features!).

You input here is definitely valuable for some folks in the way they'll want to use it. As I mentioned early on in this thread, we've a client using Amazon's CDN service which is in the most basic ways similar to the vzaar solution you've suggested.

A solution along those lines didn't seem to me to be what ManaBeads is looking for, though.

Have you tried hacking my link, by any chance? The "obfuscation" I used is amazingly simple. I haven't found a way to hack it yet ... but I could be missing something obvious.
Back to Top
manabeads View Drop Down
Newbie
Newbie


Joined: 19-January-2013
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote manabeads Quote  Post ReplyReply Direct Link To This Post Posted: 25-January-2013 at 10:08am
I love all the feedback!  Thank you.  

I checked out vzaar and it is very much what I'm interested in except it's a bit more than I need right now. If my video library grows and need better management it would be something I'd do.  It's nice to see that it can be worked into PC if needed. 

My security issues are medium. People purchase my pdfs and they can give them to friends - I realize that. It would just be nice to have the videos a little better protected.


Back to Top
Guests View Drop Down
Guest
Guest
Post Options Post Options   Thanks (0) Thanks(0)   Quote Guests Quote  Post ReplyReply Direct Link To This Post Posted: 29-January-2013 at 4:21am
I just couldn't resist taking on this project.

I see the need for providing a downloadable UI that protects the source location while allowing the media to be provided from any source ... all while using PC's built-in protections.

I've built an interface that is multi-layered such that there is no way to find the ultimate media source file no matter where it is coming from. All PC protections apply. No need to touch a single line of PC source code. Rather, just a snippet of WMS code (two lines) at the top of the HTTP path you define, and you're golden.

You can test drive it here (and please let me know if you can find any way to hack your way to the content source file -- I'll owe a pound of coffee beans or a sixer of craft beer if you can -- your choice, as I live in the land of coffee and craft beer!):
http://pc46a-wms-net.3060.wmsmerchantservices.com/store/pc/Digital-Download-Product-3-6p61.htm

For your payment method, use the "Just Testing" option.

You'll know be logged in and your options are standard PC.

Try to copy any URL you can find in this mix, and you won't get access (offer above applies X 2). There is no way to get to the "downloadable"/online access video or whatever media file without running through PC's authentication first ... and then there is just NO way to share it short of customer A providing all of their access to friend B (pretty hard to protect against that level of cheating unless you can protect your content with keys)

Best off all, not a line of PC code to change, and no database update needed.
Back to Top
Hamish View Drop Down
Admin Group
Admin Group


Joined: 12-October-2006
Location: United Kingdom
Status: Offline
Points: 56
Post Options Post Options   Thanks (0) Thanks(0)   Quote Hamish Quote  Post ReplyReply Direct Link To This Post Posted: 29-January-2013 at 4:52am
Sweet! I took a quick look and the video seems to be hosted on the mana beads website, but exactly where I cannot tell - or is that just the player...  

Edited by Hamish - 29-January-2013 at 4:53am
Back to Top
Guests View Drop Down
Guest
Guest
Post Options Post Options   Thanks (0) Thanks(0)   Quote Guests Quote  Post ReplyReply Direct Link To This Post Posted: 29-January-2013 at 8:31pm
Oopsie. My oncontextmenu block slipped out from my in-progress files. I popped that back in.

However, I did find that I could drill through it with FireFox's view source (as the links to src's in FF behave just as if you were in the visual side of the browser), so I had to add a human interaction with a form post (a "play" button with a copyright notice).

Now I'm pretty darned sure there's no way to ferret out where the media is coming from.

I think I'm now ready to package it up as a plug-in.


Edited by Sean@WMS - 29-January-2013 at 9:03pm
Back to Top
Guests View Drop Down
Guest
Guest
Post Options Post Options   Thanks (0) Thanks(0)   Quote Guests Quote  Post ReplyReply Direct Link To This Post Posted: 30-January-2013 at 12:58am
I just love a challenge that really gets me to think creatively. Yeah sure, simply putting one's experience to task is good (that's what pays the bills, right?), but every once in a while something comes along that is just an irresistibly interesting nut to crack ... and such nuts will inevitably force one to see things in ways they haven't looked at them before.

This project was an interesting study in the way various browsers execute "view source".

I tend to work in Chrome and then go check things out in other browsers. Chrome's view source executes a page exactly as if you had just called for that page in the visual side -- it loads a page as if you hadn't already loaded it on the visual side. That much I've always known, and that's very useful for debugging. 

IE, Opera and Safari are very literal. That is, their view source is exactly what you just loaded in your visual side as if that page load were static markup.

FireFox, however, is another animal: it's view source loads exactly as if you were on the visual/user interface side ... and provides links to src's and loads them when clicked exactly as if one were on the visual/UI side. 

So, FireFox's view source provided an easy drill down through all of the server-side protections I buttressed this with. Given that, I found that the only way to stop that was to introduce a human interaction -- a form post using the "post" method.

I think that nailed it and makes it impossible to discover the actual source location of the media. 

I've love any feedback from anyone who can get past it as it is now.

Other layers of protection could be added, but I don't think are necessary and would make it less user-simple for merchants. For example, Mana Beads uses a JavaScript-based player to play their .flv videos. Using a JavaScript obfuscation would make it that much more challenging to crack ... but I expect that anyone who could find a way through this current milieu could probably de-obfuscate the JS pretty easily -- so why bother?
Back to Top
manabeads View Drop Down
Newbie
Newbie


Joined: 19-January-2013
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote manabeads Quote  Post ReplyReply Direct Link To This Post Posted: 31-January-2013 at 11:33am
Thank you! Very satisfied. Very little code manipulation on my end and completely ProductCart-integrated.

Back to Top
 Post Reply Post Reply Page  <12
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.04
Copyright ©2001-2021 Web Wiz Ltd.

This page was generated in 0.047 seconds.