-
Search Results
-
Hello,
When adding a file to a new package, through the WPDM Downloads > All Packages > New Package screen, it seems to add the file to the WP MEdia Library, where the direct File URL can be accessed by anyone if entered into a browser.
Is there a setting where files that are part of a WPDM package are not publically accessible, and only accessible based on the WPDM settings?
I appreciate your time.
In reply to: After install Woo links for download point elsewhere
In the standard WP search, i type “toelichting”. A page with search results appears.
The first result is “Toelichting op kaart 3.3” that has the link “https://oudbennekom.nl/download/toelichting-op-kaart-3-3/”
When you click the link the page with URL “https://oudbennekom.nl/download/toelichting-op-kaart-3-3/” opens but it is the front page of the Woo shop.
Now the funny thing: when i use the standard theme twentytwentythree the same search gives me the same result “https://oudbennekom.nl/download/toelichting-op-kaart-3-3/” However, when i click on it now, it does open the right page, the page with the download button.
Remark: when i look at my server for “https://oudbennekom.nl/download/”, there is no such folder.I am using
-the latest WordPress, Divi theme
-The permalink setting in WP : https://oudbennekom.nl/voorbeeld-bericht/ (Message Name)
-For Woo, i use “Custom base”. In my case: /winkel/
-latest Download Manager, version 3.2.81 by W3 Eden, Inc
-latest “Divi Easy Digital Downloads” Version 1.0.1 by DiviPlugins that adds Easy Digital Downloads modules to the Divi theme and builder.Any ideas what is happening here?
In reply to: Popup form with forminator
Hello,
Thanks for contacting us.
It can be made responsive by adding custom css.
Please share related url to check the issue further.Thanks
Hi,
Thanks so much for taking your time to reply 🙂 What I do is that I replace this part of Dropbox URL “www.dropbox.com” with this one “dl.dropboxusercontent.com”, it allows browser to fetch file directly without opening the Dropbox website.
I have been using this method in Download Manger for the last 8 months and the URL was always added without any issue. But now in the updated version, when I paste the modified URL with “dl.dropboxusercontent.com”, Download Manager says invalid URL. This is the issue. Thank you again for your time.
We have a gated download available after a user provides their name and email address. upon submittal they are presented with a screen that contains download button and an email is sent with a link as well. If the user selects to download using the button, then the download link in the email does not work (show “Invalid Download” error)…and vise versa.
The download button and the email link both use the same auto generated unique url (ex. https://decisivmarketplace.com/download/decisiv-commercial-vehicle-service-analysis-report-q1-2023/?wpdmdl=47231&_wpdmkey=652053e205c7a&subscriber=EKuC93DYZJBmptiLwj7miORMHYHqVgSa0LHc-RoRVF-WxU0xUv_ARxSS0MFerUw6s-eeGPFAAXMJ6FO8w6Aqeg)
The package download limit is 999/user
The Email Lock Options are:
Ask for visitors name: SELECTED
Download Instantly: SELECTED
Do Not Mail Download Link: NOT SELECTEDAny help is appreciated.
Thanks for your reply! I didn’t configure anything! I was just using the option “Insert URL” when adding a new download and I was just pasting the direct download link in that box and it was working fine.
In reply to: Amazon S3 Plugin Not Working
Hello,
you can select file from exiting bucket, also upload file directly from amazon s3 bucket and attach with your package.
You can have to enter any url manually, s3 add-on will handle all those.
Regards
TanvirIn reply to: Amazon S3 Plugin Not Working
In reply to: Using AWS to store download file
Yes, you can select file from exiting bucket, also upload file directly from amazon s3 bucket and attach with your package.
You can have to enter any url manually, s3 add-on will handle all those.
Here is my code
import requests
import uuid # Import the UUID library for generating unique keys# Configure the API endpoint URL and your API key
api_url = ‘https://www.downloadbrandlogos.com/wp-json/wpdm/v1/packages’
api_key = ‘your API key’# Set up headers with API key for authentication
headers = {
‘Authorization’: f’Bearer {api_key}’
}# Define a list of dictionaries, each specifying a file with its title and file path
files_data = [
{
‘title’: ‘Kerala Blasters FC.png’,
‘path’: ‘/storage/emulated/0/Download/photo.jpg’,
},
# Add more files as needed
]# Generate unique keys for files and associate them with file paths
file_key_mapping = {}
for file_info in files_data:
key = str(uuid.uuid4()) # Generate a unique key using UUID
file_path = file_info[‘path’]
file_key_mapping[key] = file_path# Use the generated keys in download_params
download_params = {
‘title’: ‘Kerala Blasters FC.pdf’,
‘author’: ‘Ken’,
‘status’: ‘publish’, # Set the status to “publish”
‘files’: file_key_mapping # Use the generated keys as file identifiers
}# Create an empty list to store file attachments
files_to_upload = []# Iterate through the list of files and create attachments
for key, file_path in file_key_mapping.items():
files_to_upload.append((‘file[]’, (key, open(file_path, ‘rb’))))# Make a POST request to create the downloadable files
response = requests.post(api_url, headers=headers, data=download_params, files=files_to_upload)# Check the response
if response.status_code == 201:
print(‘Downloadable files created successfully!’)# Extract the package ID from the API response
package_id = response.json().get(‘id’)if package_id:
# Use the package ID to attach the file to the “Attach Files” section
attachment_url = f'{api_url}/{package_id}/attach’
attachment_data = {
‘media’: ‘1’ # Attach to the “Attach Files” section (1 for yes, 0 for no)
}
attachment_response = requests.post(attachment_url, headers=headers, data=attachment_data)if attachment_response.status_code == 200:
print(‘File attached to “Attach Files” section successfully!’)
else:
print(‘Failed to attach file to “Attach Files” section.’)
print(attachment_response.text)
else:
print(‘Package ID not found in API response.’)
else:
print(‘Failed to create the downloadable files.’)
print(response.text)How can I achieve this please
In reply to: Direct PDF file download
ok I think you understand . But I wish attach PDF url also download forcefully directly. is it possible to add this kind of function?
I need a more detailed explanation of what to add because you post seems to be getting cut off by periods.
Here is what is there already
<!-- WPDM Link Template: List Group --> <div class="list-group wpdm-lt-card" style="margin: 0 0 15px 0"> <a href="[page_url]" class="d-block"> <?php wpdm_thumb($ID, [500, 400], true, ['class' ► 'card-img-top']) ?> </a> <div class="list-group-item d-flex justify-content-between align-items-center"> <h3 class="p-0 m-0 elipsis">[page_link]</h3> </div> <div class="list-group-item d-flex justify-content-between align-items-cente"> File Size <span class="badge">[file_size]</span> </div> <div class="list-group-item d-flex justify-content-between align-items-cente"> Downloads <span class="badge">[download_count]</span> </div> <div class="list-group-item d-flex justify-content-between align-items-center"> <?php //echo self::downloadLink($ID, 0, ['btnclass' ► 'btn btn-block btn-primary', 'template_type' ► 'link']); ?> [download_link] </div> </div>Hello Download nManager Free Support Team,
I hope you are well. I would like to report a security issue that I have encountered in the latest version of the “Download nManager Free” plugin (version 3.2.76) which I recently updated on my WordPress website. This problem seems to be a vulnerability that allows attackers to access sensitive information without authentication, which is extremely concerning for the security of my website.
The vulnerability is described as follows:
[ Download Manager Pro < 6.3.0 – Unauthenticated Sensitive Information Disclosure
Description
The plugin leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.
Proof of Concept
– Create a password protected package containing one or more files.
– Navigate to the download page of the package (e.g./download/package1)
– Inspect the “Download” button beside one of the packaged files. The HTML should look like this:<button
class=”inddl btn btn-primary btn-sm”
data-pid=”123″
data-file=”12345678″
rel=”https://wpscan-vulnerability-test-bench.ddev.site/download/package1/?wpdmdl=123&ind=12345678″
data-pass=”#pass_113_1679405558600″>
<i class=”fa fa-download”></i>
Download
</button>– Note the
wpdmdlandindURL parameters for later.
– Send a POST request to/wp-json/wpdm/validate-filepass:fetch(“/wp-json/wpdm/validate-filepass”, {
“headers”: {
“accept”: “*/*”,
“content-type”: “application/x-www-form-urlencoded; charset=UTF-8”,
},
“body”: “”,
“method”: “POST”,
“credentials”: “include”
}).then(response ► response.text()).then(text ► console.log(text));– The response will look like the following:
{“success”:true,”downloadurl”:”\/wp-json\/wpdm\/validate-filepass?wpdmdl=0&_wpdmkey=abcdef&ind=”}
– Construct a download URL as follows, using the above
_wpdmkeyparameter, as well as thewpdmdlandindparameters from above:https://wpscan-vulnerability-test-bench.ddev.site/download/package1/?
wpdmdl=123&ind=12345678&_wpdmkey=abcdef– See that the file may be download from that URL, without any knowledge of its password. ]
Despite having updated the plugin to the latest available version (version 3.2.76), this issue still persists on my website. As a result, I am very concerned about the security of my site and the data of my users.
I kindly request your assistance and guidance in addressing this security issue effectively. Can you please confirm if you are aware of this vulnerability and if you are working on a solution? If so, when can we expect an update that addresses this problem?
The security of my website is of utmost importance, and I would appreciate any help you can provide to resolve this issue urgently. If additional information or access to my website is needed to investigate this problem, I am willing to provide it securely.
I look forward to your response and appreciate your attention to this critical security matter.
I’m sorry if my English is poor, I am Spanish and I am using ChatGPT to translate 🙂
Thank you and regards,
Saray
saray.mc@gmail.comIn reply to: SQL Query for Default Values
We have several documents in a members only portal (powered by Ultimate Member) that use Password Lock that no longer open. As far as I know, things were working fine until 2 or 3 weeks ago. When the password (different passwords for each document) is entered, the buttons reads “Processing” and nothing happens. In developer tools, I see a 403 error on [our-website]/wp-json/wpdm/validate-password. When that url is opened, it reads
{"code":"rest_no_route","message":"No route was found matching the URL and request method.","data":{"status":404}}Disabling plugins (all except WPDM and Ultimate Member) does not seem to resolve the issue.Edit to add: no errors when opening [our-website]/wp-json
In reply to: REST API-How to create new tag?
In reply to: WP Pro Membership (membership-plans page)
Hello Tanvir,
I have two other queries:
1) I want to redirect to a specific page after successfully signing up.
2) I have added plan shortcodes for different pages, like (Home & Pricing) page.https://mockible.com/
https://mockible.com/pricing/When I clicked the subscribe button, was it possible to redirect the URL to the pricing page, and then I could select the payment option there?
Let me know if you have any questions regarding these two points.
Thank you
In reply to: On chrome and edge some pdf files not downloading
please let me know if the issue has been resolved from your side. your
Site Address (URL),WordPress Address (URL)and live URL should be the same. please check and let me knowThank you again and regards
Hello Acuarel Lab,
Hope you are well. And sorry for the inconvenience. For categories hierarchy, giving access to a certain category for a particular role you have to set from the edit category option, then you have to make empty for the
Allow Accessoption or have to give a particular role on it like as I image attached or as usual for the select member option too,
because
Package Access = Package Access + All Category Access = All Visitors + Author = All Visitors and Package Access = Package Access empty + Category Access(Author) = Author or Package Access = Package Access(Author) + Category Access(Author) = AuthorMore details can be found in the below link,
I hope you have understood now.
please check and let me know. If the problem persists you can also share the related URL. if possible, you can also give your temporary wp-admin login details in a private reply for checking the issue.
Thank you again and regards
In reply to: Editing Template to show Custom Field if not empty
Hello Nate Stockard,
Hope you are well. It may require taking a customization request here, https://www.wpdownloadmanager.com/download/custom-upgrade-service/ or you can also check our this add-on, https://www.wpdownloadmanager.com/download/advanced-custom-fields/ if it fulfills your requirements. If it doesn’t help you can also share some screenshots or related URLs elaborating on the issue. Thanks for your appreciation.
Thank you and regards
In reply to: API file downloading
Topic: Related Products URL
Is it possible via Add-Ons or templates to associate a related pages URL with a package? See image as an example.
Topic: ?wpdmdl= not working
Hi,
recently the ?wpdml= for an direct link stopped working correctly.
When accessing for an example:
https://www.international-petroleum.com/download/?wpdmdl=2561
https://www.international-petroleum.com/download/?wpdmdl=2557
https://www.international-petroleum.com/download/?wpdmdl=2558It gives the same files to download, while it should be different files.
But when adding some random text in the url like:
https://www.international-petroleum.com/wadawdawd/download/?wpdmdl=2558
It gives the correct document.
In reply to: WPDM plugin – Block Hotlink not working
As the WPDM Block Hotlink add-on will help you to block hot links to download URLs from external sites, it will not work when it’s a link to an external download site. I hope you have understood.
Thank you and regards
In reply to: Password Protect Documents for Download
Hello Bill English,
Hope you are well. And sorry for the inconvenience. For password lock process details, can you please check this doc?
And for your issues, please share the related URLs, you can also share some screenshots, if possible, can you please, give your temporary wp-admin login details in a private reply for checking the issue?
Thank you and regards
