Hi
I have a website that allows users to purchase software and then receive a link to download.
My download store wordpress plugin simply retrieves the file from a URL i specify. The file is stored on a server in azure and is served via an IIS virtual directory.
Here is what I am trying to do:
I want to ensure that only downloads that come from my website are allowed. I was thinking that i could put a firewall rule to only allow my website. But it seems the download is initiated by the user IP address or the customer. I obviously can not white list everyone's ip.
Is there another solution that will allow me to secure the download to ensure its only initiated by website ip? Either on Azure or some other security method...maybe using FTP?
Looking for some ideas here.
Thanks