Jump to content


Recommended Posts

I have set a few pictures to download on my shop - no customer yet.


However, I find that 94 downloads occurred in ps_product_download




How do they do that ? There has been no order for any virtual product.


When I test the system as a customer, I can see no way to get a free access.


Has there been any such security leak report for ?


Is there a way within PS to track back the dowloaders ?



Link to comment
Share on other sites

@ musicmaster : there is no counter, there is a listing of downloads with dates, from there you get the count (1 download = 1 ps_product_download table entry)


@ Vekia : yes I do, but a pretty official one.


(i) Either there is a security failure, or

(ii) there is a bug adding downloads that do not occur


Considering human factors makes hypothesis (ii) more plausible : the type of file content would not be of any interest AT ALL to skilled hackers and the profile of interested persons is to hardly succeed using a computer


I guess...


But this is worth investigating

Link to comment
Share on other sites

Here is a sample screenshot, please help me make sense of this



Indeed something is weird, there is only 1 file (1 product) but here it seems 3 versions do exist (3 different filenames for the same display_filename)

Also the expiration date anterior to the date_add :wacko: 


I interpreted - maybe wrongly - the field id_product_download as the reference for each download, then you just count and get the number of times it was downloaded


Now I would still tend to understand it that way, please let me know how it has to be understood : If it is not the download id, then the bug is of another nature than I previously thought



Link to comment
Share on other sites

I have tested it under and 1.6.1 and see no repeating downloads. Neither do downloads have any effect.


It may be that it is your expiration date that is causing strange behavior. I haven't set it so it always "0000-00-00". So I am puzzled why you have set it in the past. But when I set the time for my product in the past I don't see any repeat products either. The download link stays there but when I click it I come on an empty page.


Maybe Vekia is right and it has something to do with something customized. But it certainly isn't normal behavior.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...