Hello,  I have a licensed product and full source code.  The thankyou
page ( needed to work withClickBank )says:-  Currently all the
thankyou pages are named "thankyou.html" to make it easy for you to
work with them.  However, I highly recommend you rename each thankyou
page to something else before placing on your website.   If you do not
rename the thankyou.html page, anyone who enters the thankyou.html
page can download your product without paying.

I do understand the wisdom of this but I need a step-by-step, how to
answer.
Thanks R P.

---

Request for Question Clarification by tar_heel_v-ga on 13 Dec 2002 05:46 PST

Would a script of some type that will dynamically create a thankyou
page or a script that would protect your thankyou page suffice?

-THV

---

Request for Question Clarification by kyrie26-ga on 14 Dec 2002 19:24 PST

Hello king67-ga,

As a seasoned Web Programmer, I believe I have the solution to your
problem. However, I need to know what kind of resources you have at
your disposal. Specifically :

1. Do you have scripting capability on your Web pages? I.e. do your
pages use Perl, ASP, ColdFusion, PHP or JSP etc?

2. If yes, are you familiar with the concept of session variables? Are
you willing to learn this, or do you have as a resource a Web
programmer who can implement a page using session variables?

Do let me know and we'll be on the way to a solution! Thanks.


kyrie26-ga

---

Clarification of Question by king67-ga on 15 Dec 2002 03:18 PST

Hello Kyrie26-ga,     Question subject:-   thankyou.html
The only scripting capability I am aware of is notepad, I have used
this with the product.
Session variables:-   I haven't used this but if it will help I am
certainly willing to learn.  As they say, "I need to know".   Thanks
for the reply,Ron P.

---

Clarification of Question by king67-ga on 15 Dec 2002 03:40 PST

Hello,tar_heel_v-ga    I have a script for a thankyou page.  I don't
really need to protect the thankyou page as it has a download job to
do.  Thanks for trying to help.  Your efforts aren't wasted believe
me, as when you are looking for clues and answers this is a great
system.  king67-ga

---

Request for Question Clarification by lot-ga on 15 Dec 2002 08:04 PST

Hello king67-ga

This researcher (me) is a bit slow of the block this morning. Need a
strong coffee :-)

I thought my interpretation of your original question was that you
wanted to protect your download page, as clickbank are highly
recommending (a crude way) of protecting this page (from bookmarking,
sharing etc).
I was expecting tar_heel_v-ga's suggestion of a script to protect it,
would be the solution, however I'm a bit disorientated now, as your
latest clarification mentions that you don't really need to protect
it?

Sorry if this sounds like a silly clarification.

Kind regards
lot-ga

---

Request for Question Clarification by kyrie26-ga on 15 Dec 2002 15:49 PST

Hi king67-ga,

I think I understand what you mean. You want to allow downloads on
that page, but only for the specific user and only for a certain
window of time. This can only be accomplished with a dynamically
created page, and you will need scripting capability for this. When we
say scripting, we usually mean server-side functionality that is
database-enabled. So, on the web host server, it could be a Perl
script, or PHP, and so on. Now the question is, what kind of scripting
language does your web hosting provider have?

kyrie26-ga

---

Request for Question Clarification by tar_heel_v-ga on 15 Dec 2002 17:54 PST

king67..

I think you misunderstood what I meant.  By protect your thankyou
page, I meant a script that works in conjunction with the thankyou
page which would not allow anyone access to it other than those that
have paid for your product.  Check with your host provider to see if
you can run PHP or CGI scripts, and I can provide a solution for your
problem

Regards,

-THV

Not familiar with the product, but would seem that you need to rename
the page, either thru the editing program you use, or by FTP, to
another name so that people who try to hack into your system won't
know where to look for the page that has the desired information, for
example - changing it to "thanks62h38ds.html" would be hard to guess. 
You may also need to change any configuration references to it. It
also should be in a directory that has an index.html (or
htm/shtml/etc) file to catch people that simply try to get a directory
listing and search thru the files.  (this can also be blocked with
code in an " .htaccess" file, but that is a bit more complicated, and
varies from system to system.

King67,

I have not answered your question because of something I discovered
while researching. No matter *what* you name your thank you pages,
once someone purchases one copy of your product, they then have a URL
(garbledthankyou55068.html or whatever) where they can send any number
of other people to get your product for free. You may want to look
into one of the programs that generates ClickBank specific protection,
or consider using a different program than ClickBank.

- Hammer

I, too, am unfamiliar with the ClickBank product, but to me it sounds
as if the idea is to create a temporary page on your Web site
"garbledthankyou55068.html" and remove it after the customer download.
 Detecting that page hit might be a trickier issue than generating the
randomly modified "thank you" URL.

-- mathtalk-ga

You really need another program to secure yourself from unauthorized
downloads. Even renaming your thankyou.html page every time a user
visits it, the download URL for the program itself will probably
remain constant. King67 seems to have the right idea - you'll need to
work with session variables to truly secure your system.

Hello,  The festivities caused a delay in getting back to you all.  On
reflection over this period I think that the option already put by
bobthedispatcher on 13 Dec 2002 will best fit my requirements. Will
you please consider this question now answered and my thanks to all
who helped.  Bye for now.king67.

king67..

I am glad you found a solution, however, if the word gets out that
your tankyou page is "thanks5834kd84.html" you will still be in the
same predicament.

-THV

Yes I tend to agree with my collegue tar_heel_v-ga, it may still be
problematic.
There are scripts that generate unique download URLs which 'self
destruct' are one time use only, and cannot be bookmarked.
regards
lot-ga