close ad
WARNING: Do Not Install the DREAMWEAVER CC 2017 Update »
open ad
View Menu

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

rating

Precaution for guessing URLs

Thread began 6/06/2013 9:46 am by Jon Cunningham | Last modified 6/06/2013 11:10 am by Jon Cunningham | 361 views | 4 replies |

Jon CunninghamBeta Tester

Precaution for guessing URLs

Hi Guys,
I would like to ask for some direction on my new project.
Small Brief.
I am redesigning our online training centre that will offer a number of courses to purchase online along with tangible products.
Once client has purchased a course, that course becomes available in the client frontend to complete and submit exams.
What I have completed so far tested and works.

Setup ecart and integrated with Data assist to create my shopping cart pages.
Setup registration on checkout.
Setup Security.
Setup order History / details Pages
Setup client Courses Profile page to list only course’s that client has purchased.
Set up link to Courses Profile page only if client has purchased a course because I don’t want anyone who has not purchased a course to gain access to the Course profile page. (For example, if they just register for an account or have purchased a tangible product.)
Phew – All well and good.
Here is where I need some direction please.

Since each course will have different course material, HD Video’s and exams etc.
What will be the best way to separate each course so no one can gain access to the course material unless they have purchased that particular course? I am talking about someone maybe guessing a URL for another course.

Kind Regards

Jonathon

Sign in to reply to this post

Jason ByrnesWebAssist

Before a purchase can be made, the user will need to register and login.

When the order is processed, the store order summary behavior should store the users ID

this will create a relation from the order to the user.

The recordset that returns the downloadable products will use the users ID as a filter to only show products the user has purchased.

See the Creating a Download center tutorial for more details

Sign in to reply to this post

Jon CunninghamBeta Tester

Hi Jason, as I noted in the previous post I have all that working just as you said in your post although the client will not be downloading anything as all course work will be online but I have used the tutorials to good effect.

I am wanting to know what was / is best way to protect further pages specific to each course as I am unsure on how to protect these specific pages.

Using a `show` if on all pages that are relevant to each specific course does not seem the brightest way to do this as there can be up to 20 pages or so per course of material.

Sorry to sound `blonde` - Am I missing something here?

Regards

Jonathon

Sign in to reply to this post

Jason ByrnesWebAssist

the recordset used to display the course will need to include the orders table and the orders details tables.

the course ID will be stored in the details, also the Order ID will be stored in the details

This will relate to the orders table which stores the User ID which relates to the logged in user.

you need to use a join query to join these tables together, in the where clause, you can add an additional check for the Order.UserID being equal to the logged in user ID.

This is the technique used for the download center.

whether you will be offering downloads or not, the same technique applies.

Sign in to reply to this post

Jon CunninghamBeta Tester

Thank you for your reply.

I have the joins already etc and will implement this.

Many thanks for your time Jason

Sign in to reply to this post

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now.  Build a store, a gallery, or a web-based email solution.

Want your website pre-built and hosted?

Close Windowclose

Rate your experience or provide feedback on this page

Account or customer service questions?
Please user our contact form.

Need technical support?
Please visit support to ask a question

Content

rating

Layout

rating

Ease of use

rating

security code refresh image

We do not respond to comments submitted from this page directly, but we do read and analyze any feedback and will use it to help make your experience better in the future.

Close Windowclose

We were unable to retrieve the attached file

Close Windowclose

Attach and remove files

add attachmentAdd attachment
Close Windowclose

Enter the URL you would like to link to in your post

Close Windowclose

This is how you use right click RTF editing

Enable right click RTF editing option allows you to add html markup into your tutorial such as images, bulleted lists, files and more...

-- click to close --

Uploading file...