First time setting up a digital purchases online and would like some pointers/tips on how to protect the directory where all the digital items are stored so someone can't access the file directly like:
I'm using CartThrob, so I will either use the
download_file_form tags which will handle link protection & obfuscation.
I just want to make sure I have all my ducks in a row. Thanks!
I have directory browsing turned off with
.htaccess rules, so this fixes listing any files. I saw a couple solutions with adding rules to the directory, but wasn't sure if this would allow CT tags to access the file since I can't access it over the browser:
Order Deny, Allow
Deny from all