-
I’m wondering if the email sent with the authcode is allowing others to see without payment.
If not logged in I can not see the video, Wonderful!
A limited test showed that I can have different IPs if logged into my wp account and still see the video. Great for moving users! I assume and correct me if wrong they can go to three different IP addresses (you say 3 different devices,) or unlimited?
I then tested to see if different emails (say you forwarded to a friend) can also see the film and they could since it doesn’t require a login. So is it broken on my end or a flaw?
-
-
I see the blocked ipaddrs now. It did allow 3 ipaddrs but then two other ipaddrs picked up the routed email through google mail and also attempted to use the link and were blocked. Whoa, goes to prove email is not secure. I guess it is working as intended. A user could share the email with two friends if they wanted to but then all would timeout eventually. I thought the code would be userid/email and 3 ipaddrs specific. I guess the problem with emails is only the ipaddr is known.
I wish that email feature (sending the authcode email) could be turned off as an option since the fv ppv requires a userid/email account on the woocommerce system. They could be required to login and watch the video since that account has been created anyway during purchase.
After discussion with others, I see where the email helps in sales where people don’t want to login. It was interesting that others along the email routing looked at the email and therefore I assume, could use up the ipaddrs before the user ever got to. I’m sure that would be a very rare event, but I wonder if there is a way to reissue that for them if that happened or just issue a refund and let them try again?. Any suggestions?
Hello Ron,
it’s correct that 3 devices are allowed. Each device is a combination of IP and the user agent (browser). The IP address which made the purchase is allowed to use an unlimited number of user agents, so that the user can try different browsers if he’s somehow not able to play the video.
It doesn’t seem likely that anybody involved in the email routing would be looking at these emails and opening the links.
Perhaps we could add an option to disable these email video viewing links and instead switch the to a different mode of operation, where it would show a login form to make it easier to log in to the website right were the video is.
Thanks,
Martin
