PDFs direct link not password protected

Hi,

I have been using this for a quarterly digital publication. I thought it was working properly, but found direct links to the pdfd allowing access without the password. Did I forget something or perhaps am confused on the function?

Have you checked the following documentation how-to-password-protect-your-wordpress-downloads/?

There is also the following option offering-downloads-to-logged-in-users-members-only to allow only logged in users to download the files.

Kind regards

Yes, I have followed those steps. Within download manage the files show as password protected, but anyone who find the linked file can open it without a password. Note the sdm page works properly, requiring a password.

I would prefer not to require users to be logged in as well as entering the password, since there were enough who struggled with just the process of entering a simple password.

Here is the page developed to allow members to download pdfs, this works, requiring a password: https://store.titanichistoricalsociety.org/commutator-download-instructions/download-commutator-no-230/

The pdfs uploaded via Download Manager show as password protected, but a direct link to each pdf does not require a password.

Hi,

The pdfs uploaded via Download Manager show as password protected, but a direct link to each pdf does not require a password.

In that case, the following addon hidden-downloads-for-simple-download-monitor might be what you are looking for. Let me know if this helps you.

Thank you

Based on my review, this will not make any difference. The download process for users currently requires the entry of a password as desired. This is whether the user is a member so the download is included, or a one time purchaser. In neither case is the pdf file name exposed that I have found.

The concern is that if the .pdf filename location is guessed or found and accessed directly NO password is required. I thought Simple Download Monitor’s function was to prevent such an option.

Hi, I have submitted a message to the developers to investigate further your issue/concern.

Thank you

I am willing provide the direct links via email if desired to review. Presumably you can understand why I don’t want to post them here in a public forum.

Thank you for your consideration, and quick response ??

This is actually not the right plugin for what you need. The password protection is not for the static file. A password can be only be applied to a PDF file via the PDF creator (when you create the PDF file). That is not something our plugin does. So you need to look for an alternative plugin.

It simply applies a password to the download post (not the static file).

I am not certain we are in sync. I do not want to password protect the file. I want to prevent unauthorized downloads. I though that was what Simple Download Monitor was intended to provide, no? Once the user has downloaded the file I do not want them to need a password.

SDM requires a password but ONLY if the user attempts to download via SDM. My issue is the file can be downloaded by bypassing SDM and directly downloading the file.

Isn’t SDM expected to prevent unauthorized users from downloading the file(s)?