<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
John,<br>
<br>
Thanks for that, it is very helpful.<br>
See below for comments in-line...<br>
<br>
<div class="moz-cite-prefix">On Wed 17/02/21 19:37, John Thurston
via ZendTo wrote:<br>
</div>
<blockquote type="cite"
cite="mid:WM!8a0177cbf48795bb4d8c30e6a2f2783b3b34913e10a2bcbc8a71880651219887c466b45a27b93de72dd2124342e39188!@mx.jul.es">On
2/17/2021 3:27 AM, Jules via ZendTo wrote:
<br>
<blockquote type="cite">
<br>
<br>
*CAUTION:* This email originated from outside the State of
Alaska mail system. Do not click links or open attachments
unless you recognize the sender and know the content is safe.
<br>
<br>
Folks,
<br>
<br>
One site has asked me to add functionality to allow them to
create drop-offs in which each file can only be downloaded once.
<br>
<br>
Effectively "one-shot" download links.
<br>
</blockquote>
<br>
Meh. I can't see the use, but I can see it generating support
calls. If you add it, *please* make the feature invisible unless
explicitly enabled at the application-layer.
<br>
</blockquote>
There will be a show.... preferences.php setting to enable and
disable it.<br>
<br>
<blockquote type="cite"
cite="mid:WM!8a0177cbf48795bb4d8c30e6a2f2783b3b34913e10a2bcbc8a71880651219887c466b45a27b93de72dd2124342e39188!@mx.jul.es"><br>
re: value
<br>
A 'download' count has to be incremented when the download process
starts. The application-layer doesn't really know if the download
succeeded. So a one-shot token will be burned, even if the payload
wasn't delivered.
<br>
</blockquote>
I was going to set the "it's been downloaded" flag when ZendTo
thinks the download process is complete. So if the user's download
fails to start or break part-way through, that doesn't count as
being downloaded. I'm literally going to put the "set the flag" code
immediately before ZendTo logs that the file has been downloaded.<br>
<br>
<blockquote type="cite"
cite="mid:WM!8a0177cbf48795bb4d8c30e6a2f2783b3b34913e10a2bcbc8a71880651219887c466b45a27b93de72dd2124342e39188!@mx.jul.es"><br>
Once a customer has a payload, it can be shared with anyone the
recipient cares to. What's the point of limiting the number of
times it can be pulled from the server?
<br>
</blockquote>
Agreed, but it stops any 3rd party who manages to get hold of the
ClaimID and Passcode from easily getting their own copy. Yes, the
recipient can choose to share it. But if a "bad actor" gains access,
finding a copy will be a whole lot harder for them.<br>
<br>
<blockquote type="cite"
cite="mid:WM!8a0177cbf48795bb4d8c30e6a2f2783b3b34913e10a2bcbc8a71880651219887c466b45a27b93de72dd2124342e39188!@mx.jul.es"><br>
If the uploader wants to limit the number of downloads, the "file
has been downloaded" mail message can be used to prompt manual
deletion.
<br>
</blockquote>
Indeed it can.<br>
<br>
<blockquote type="cite"
cite="mid:WM!8a0177cbf48795bb4d8c30e6a2f2783b3b34913e10a2bcbc8a71880651219887c466b45a27b93de72dd2124342e39188!@mx.jul.es"><br>
re: support
<br>
Every failed download of a one-shot is gonna tirgger a complaint
when the URL doesn't work on the retry.</blockquote>
The sender can use the "Resend Drop-off" button via their ZendTo
Outbox to reset the "has it been downloaded" flags. That's
communicated to the sender when they create the drop-off.<br>
<br>
<blockquote type="cite"
cite="mid:WM!8a0177cbf48795bb4d8c30e6a2f2783b3b34913e10a2bcbc8a71880651219887c466b45a27b93de72dd2124342e39188!@mx.jul.es">
Before someone recommends this feature, they should study their
Apache log and see how often a single person restarts each
download. I've looked in mine, and I won't be enabling this
feature.
<br>
</blockquote>
I entirely agree here. I'm hoping that not setting the "it's been
downloaded" flag until ZendTo is as confident as it can be that the
download has completed, will reduce the failure count. But you are
spot-on that any site using this feature needs to accept that there
is going to be a certain support cost that goes along with it. I'm
trying my very best to minimise that support cost, but there is no
way to reduce it to 0.<br>
<br>
The site that initially requested this were fully accepting of this
cost.<br>
<br>
Cheers,<br>
<pre class="moz-signature" cols="72">Jules
--
Julian Field MEng CEng CITP MBCS MIEEE MACM
'A committee is a group of the unwilling, chosen from the unfit,
to do the unnecessary.' - Anon
<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
</pre>
</body>
</html>