Clickbank/Download Cloak

yodavoda · #1 06-16-2007, 08:16 AM

Hi. I have recently registered an ebook with Clickbank and have a security script query.

Once someone purchases the book they are taken to my own website thank you page. Within that page I have the link to another page that is the book/pdf file. My concern is that once someone lands on that page they could copy the url and send it to whoever they like for free access. How do I stop this?

Clickbank have the following mumbo jumbo to somehow stop it but I don't understand it and do not know where or how it would link into my site. I have placed the 'robots, no index, no follow' etc html in my head element but it is point 6 number 3 and point 7 below that I do not understand...something to do with cgi..... hope someone can help.
Kind regards
Michelle.
6. Thank You Page Protection

The following html code inside your <HEAD> element of a page should prevent a robot from indexing that page or following links on that page:
META name="robots" content="noindex, nofollow"
Give your Thank You Page URL an obscure file name (it does not have to be thankyou.htm -- that is too easy to guess)
If you are concerned about security and you have experience with cgi programming, you can generate a script that will verify the customer's successful completion of the purchase process before allowing him or her access to the Thank You Page. Please follow the instructions below for implementing the ClickBank Link Security Script:

7. ClickBank Link Security Script

When the customer completes a purchase, several values are passed along in the query string if you have specified a secret key in your account settings. These are the ClickBank receipt number (cbreceipt), the epoch time of the order (time), the ClickBank item number (item), and the ClickBank proof of purchase (cbpop) value.
During the purchase we encrypt the receipt, time, and item using the secret key you specify in your account. We will then pass the result back to you as a query string parameter called "cbpop". Use the validation script to confirm the cbpop value is correct.
Unlike prior versions of this script there is no need for a "seed" value.
PHP SOURCE:function cbValid(){ $key='YOUR SECRET KEY'; $rcpt=$_REQUEST['cbreceipt']; $time=$_REQUEST['time']; $item=$_REQUEST['item']; $cbpop=$_REQUEST['cbpop']; $xxpop=sha1("$key|$rcpt|$time|$item"); $xxpop=strtoupper(substr($xxpop,0,

); if ($cbpop==$xxpop) return 1; else return 0;}
PERL SOURCE:sub cbValid{ my($q,$key,$rcpt,$time,$item,$cbpop,$xxpop); $key='YOUR SECRET KEY'; $q='&'.$ENV{'QUERY_STRING'}; $q=~/\Wcbreceipt=(\w+)/; $rcpt=$1; $q=~/\Wtime=(\w+)/; $time=$1; $q=~/\Witem=(\w+)/; $item=$1; $q=~/\Wcbpop=(\w+)/; $cbpop=$1; use Digest::SHA1 qw(sha1_hex); $xxpop=uc(substr(sha1_hex("$key|$rcpt|$time|$item" ),0,

); return 1 if $cbpop eq $xxpop; return 0;}

Vasili · #2 06-16-2007, 09:32 PM

It would be nice to know if you are using a BV-created site or a cart....

yodavoda · #3 06-17-2007, 03:10 AM

Hi, thanks for your interest.
I have created my site with BV however I do not use a cart as such. When a customer wants to order they click on a link in my site which directs them to the Clickbank payment page. From there once their payment has been approved they redirected back to my site to a 'thank you for your order' page which includes the link to my pdf/ebook page. Hope that helps.
Michelle.

Vasili · #4 06-17-2007, 03:16 AM

No not really.....not only do I have personal objections to ClickBank, I cannot wrap my puny brain around how to circumvent this porus functionality offered by them.

Other than doing a search in this forum on "cloaking" links to see how you can "mask" the url display in the browser for the pages you specifically are referring to, I would have no other suggestions.

Sorry!

That's why I use carts like Soholaunch and osCommerce....I get to have a very secure platform I can control and maintain "in-house" !!

yodavoda · #5 06-17-2007, 03:23 AM

lol
i know i know. i read alot about clickbank on these forums yesterday, of course after i signed up and put all the effort into setting it all up! i will get around to changing providers but for now, at eight months pregnant, i just want to get it all in place as is for now.....

thanks for atleast trying to think about it:)
michelle

Vasili · #6 06-17-2007, 03:27 AM

M-

I think it was Mook that posted a good way to "cloak affiliate links"....I am sure you can use the same logic to "mask" all of these pages that really have no need for the consumer to see the URL's....as long as they are properly linked to and fro, and your method is sound.....this way, they can't re-visit the pages.

At eight months I know how you don't want to hear excuses from any guy whatsoever, so I figured you would appreciate the "clarification" shall we say??
LOLOL

yodavoda · #7 06-17-2007, 03:36 AM

yes everything is wearing very thin!

i had a look at all the cloak type posts but only one sounded remotely like what i needed but i couldn't quite understand it. i'll have another look at it but i think it is more as you approach a page that you can set up a page in between which I have done as my site goes to the clickbank page i have 'quiet' page in the middle that is pretty much a blank screen for a few seconds so there isn't all the link trail showing. but like you said it is actually masking the url the customer lands on i need or to use the html clickbank offer to somehow insert my 'secret key' into all their script???? too confusing...and as they say "if you are experienced at CGI..." so tuff luck for all of us who aren't hey.... i don't like them already and i haven't really started.

thanks heaps.
michelle.

Vasili · #8 06-17-2007, 03:50 AM

Another approach would be to insert some "re-directs", so even though the URL is keyed, it automatically delivers people to another undisclosed page, and the exit link can be another re-direct as well, thereby doing the "shuffle" of pages visited.....

No...the process of cloaking I mentioned is really pretty easy, Michelle...merely substitute the mentioned "affiliate link" with the links you are protecting, and the same idea is performed: http://www.vodahost.com/vodatalk/ebu...light=cloaking

yodavoda · #9 06-17-2007, 04:10 AM

thanks i will check out the link and give it all a good go.

Vasili · #10 06-22-2007, 12:44 AM

and on we go.....

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)