File download link serious problem

Hi guys

We seem to have a serious problem and I have no idea since when.

A level 4 member can download all our issues, including back issues. Levels 1, 2 & 3 can download only the current and future issues. When a level 1, 2, 3 member visits the page of a back issue, the member cannot see the download link (this is how we have designed the site).

However, if a level 1, 2, 3 member (logged in of course) copies the url of the current issue (26 for example) and changes the number to 18, then that member can download issue 18. This should not be happening.

Latest issue page url (you can’t see the download button of course) http://landscapephotographymagazine.com/magazine/issue-26/

A back issue url for the magazine page http://landscapephotographymagazine.com/magazine/issue-25/
A back issue actual url http://landscapephotographymagazine.com/wp-content/plugins/s2member-files/lpm_issue_25_lq.pdf?b20eca

Link to the download file (you need to login of course) http://landscapephotographymagazine.com/wp-content/plugins/s2member-files/lpm_issue_26_lq.pdf?b20eca

Any ideas as to what is going on? Do you need access at the back end?

Dimitri

Thank you for your inquiry.

s2Member doesn’t restrict files based on level, but only restricts based on number of downloads. If you’d like to only allow Users to download videos if they have access to a specific file, change your Basic Download Restrictions to allow for a small amount of downloads at level 0, and use the key provided in Advanced Downloads to give access to downloads.

See: Dashboard -› s2Member® -› Download Options -› Advanced Download Restrictions

Hi Bruce

How can it not restrict files based on membership level? It is a membership plugin that works with levels. Isn’t this the whole idea? If it doesn’t restrict files, what does it restrict? Posts? Pages? We know that, it is the files we want to protect as we work with files (pdf).

As for using the advanced download restrictions, we are using those but for ‘buy the file once’ buyers, not the members. We assumed that the levels restriction would prevent members of certain levels to download all files.

What you are saying is that, it is normal for s2member members of any level to download any file, whenever they want. This cannot be right.

In other words, when we allow someone to register for 3 future issues (level 1), that member can download all back issues worth a lot of money that only a level 4 member can (or should) download? Something is not right here.

Should we perhaps use a different folder (wp-content/plugins/s2member-files/level_4_issue_1.pdf) to store the pdf files for level 4 members? Would that work?

What you are saying is that, it is normal for s2member members of any level to download any file, whenever they want. This cannot be right.

I’d recommend reading over the information provided in your Basic Download Restrictions regarding this. s2Member only protects downloads based on the number of files that can be downloaded. If you’d like to restrict file downloads based on Membership Levels or Custom Capabilities, you’ll need to use Conditionals, rather than these restrictions, and the keys Provided in Advanced Download Options.

See: Dashboard -› s2Member® -› Download Options -› Basic Download Restrictions
See Also: Dashboard -› s2Member® -› Download Options -› Advanced Download Restrictions