Sale of dynamic content and securing mp3, pdf files [PHP/mySQL]

[davss]

Hi all,

This is quite big (maybe too big for my skills) hence am asking for your help/opinions on the logic and what's the best way to code this.

Basically I am to develop a website which sells language lessons in mp3 and extras in pdf. Visitors will be able to register and buy: single lessons, extras, packages built from those lessons at a more attractive price or monthly subscription. The last one will give access to all content from the date of purchase to when it expires.

Modules required:
- secure area for admins and newly signed up users
- mini CMS
- shopping cart with express paypal check out
- forum
- live chat


Problems to resolve:

1) How to secure files on the server so only after purchase are available in user accounts?
a) secure all files from all guests
- thought of using a secure folder on my server

b) make available purchased files for a user account
- field in mySQL database

c) restrict access to files outside subscription i.e. only those from start to end date are available.

d) make newly posted files available in iTunes via RSS/XML file
- At the moment we have been creating accounts to a secure folder on our server for people using iTunes. The are provided with a link to an xml file.

Many thanks in advance
David

[niggles]

Hi,

To provide only the relevant links to someone, you're going to have to create their links on the fly and link them through some download script rather than directly to the PDF or MP3 e.g.

download.php?customer=customer_id&filename=databas e_id

You can use this to check that they're a valid customer and/or have a right to download a file and if so, then serve up the content.

PHP: Hypertext Preprocessor has examples of how to change the header content to allow this e.g.

<?php
// We'll be outputting a PDF
header('Content-type: application/pdf');

// It will be called downloaded.pdf
header('Content-Disposition: attachment; filename="downloaded.pdf"');

// The PDF source is in original.pdf
readfile('original.pdf');
?>

This way no one can actually link to the files or share links etc as the files are only made accessible when they've been called through a valid link and session.

Cheers,
Niggle

[davss]

Thanks Niggle.

If I am correct this is covered by a tutorial at How to protect PDF files using PHP ?

[niggles]

Hi,

Yep, that's the sort of thing.

Cheers,
Niggles