{"action":"closed","issue":{"url":"https://api.github.com/repos/woocommerce/woocommerce/issues/21630","repository_url":"https://api.github.com/repos/woocommerce/woocommerce","labels_url":"https://api.github.com/repos/woocommerce/woocommerce/issues/21630/labels{/name}","comments_url":"https://api.github.com/repos/woocommerce/woocommerce/issues/21630/comments","events_url":"https://api.github.com/repos/woocommerce/woocommerce/issues/21630/events","html_url":"https://github.com/woocommerce/woocommerce/issues/21630","id":372616467,"node_id":"MDU6SXNzdWUzNzI2MTY0Njc=","number":21630,"title":"Restrict to download the virtual product if its path(upload directory) exposed","user":{"login":"abdullah1908","id":14175927,"node_id":"MDQ6VXNlcjE0MTc1OTI3","avatar_url":"https://avatars2.githubusercontent.com/u/14175927?v=4","gravatar_id":"","url":"https://api.github.com/users/abdullah1908","html_url":"https://github.com/abdullah1908","followers_url":"https://api.github.com/users/abdullah1908/followers","following_url":"https://api.github.com/users/abdullah1908/following{/other_user}","gists_url":"https://api.github.com/users/abdullah1908/gists{/gist_id}","starred_url":"https://api.github.com/users/abdullah1908/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/abdullah1908/subscriptions","organizations_url":"https://api.github.com/users/abdullah1908/orgs","repos_url":"https://api.github.com/users/abdullah1908/repos","events_url":"https://api.github.com/users/abdullah1908/events{/privacy}","received_events_url":"https://api.github.com/users/abdullah1908/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-10-22T17:26:37Z","updated_at":"2018-10-22T17:48:09Z","closed_at":"2018-10-22T17:48:09Z","author_association":"NONE","body":"**Describe the bug**\r\nWe are running a marketplace where we sell the virtual(downloadable) products. There should be an option to enable the anti-hot-linking for the virtual products so anonymous couldn't download the product. This is a very critical bug and it should be fixed ASAP.\r\n\r\n**To Reproduce**\r\nSteps to reproduce the behavior:\r\n1. Simply go to the Product detail page from the admin\r\n2. Copy the URL of the file(Downloadable Product)\r\ne.g (https://siteurl/wp-content/uploads/woocommerce_uploads/2018/10/product_name.zip)\r\n3. Open the file URL in private window or any-other browser where you are not logged-in\r\n4. It'll download the product\r\n\r\n**Expected behavior**\r\nIt should give some error like \"Invalid Link or You don't have permission to access this URL.\" and stop from downloading the product.\r\n\r\n**WordPress Environment**\r\nWP Version: 4.9.8\r\nWooCommerce Version: 3.4.7"}}
{"actor":{"display_login":"claudiulodro"}}