We are creating a site that is purely for downloadable PDFs of out-of-print publications from our back-catalog. I've been testing ProductCart on an internal server before we replace our current solution from SmartCart (monthly fee and little site design flexibility, vs. ProductCart's total customizability and one-time fee).

For digital download product, SmartCart actually makes a copy of the PDF in another folder with a funky generated filename, and gives the customer the URL to that file. A cleanup process removes files from that folder that are past the "download link lifespan."

ProductCart is generating a unique URL for the order confirmation e-mail that the customer receives, but once they click on that link and the PDF opens in the browser, the browser's address bar shows the true original location of the PDF file. They could make a note of that and post it to some BBS, and everyone would have access to our product files.

Is there any way to make ProductCart truly hide and never reveal the URL of the download file? 

Hi Brian,

If we are not mistaken, there is no longer a way to hide a URL in Internet Explorer 7. That's because the browser contains anti-phishing measures that are based on the idea that the customer should always be able to see the URL of anything that is loaded by the browser.

The fact is, even if the URL were hidden, you would not be fully protected. The ill-intentioned customer could simply upload the file to any forum, BBS, or file sharing system where other people would be able to download it.

The only way to fully protect digital documents is through DRM (digital rights management).