Do-next options are provided after adding a download, as is also the case when managing other Composr content

(Click to enlarge)

Adding a download

(Click to enlarge)

Manage downloads from Admin Zone > Content > Downloads.

Upload vs URL

When you add a download you have a choice as to whether to specify a URL or to attach a file. There are other options actually, explained in more detail in the Advanced provision of downloads tutorial.

We recommend that you attach a file, as Composr can then manage it without risk of the URL being broken by something outside of the Composr control.

There is a caveat with this, however, as the web was not designed for uploading large files. Essentially, the web was designed to make fast requests for web pages: attaching a large file extends the request, and widens the window for transfer errors (HTTP uploads have no 'resume' mechanism, and no good way of easily finding it a transfer is actually proceeding other than checking for network usage).

In addition, PHP may not support large files (sometimes dropping POST information as well as the file, which makes Composr give an error message).

Therefore we recommend not to try attaching a file more than around 250MB in size. Larger files should be uploaded manually, and then the URL entered.

Security

Viruses

It is your responsibility to scan files for viruses, as Composr does not include a virus scanner. This is particularly relevant to those submitted for validation by users.

Protection from hackers

For an uploaded file, you will see upon edit that the filename of the actual on-disk file can not be determined from the URL. Composr stores the true filename in the database, but makes it so that people cannot circumvent the download system and download files directly. When an uploaded file is downloaded, it does not actually directly indicate for the user's web browser to download the URL, but rather, it is 'piped through' Composr so as to hide where it came from. This allows you to maintain your chosen permission scheme. In addition, Composr provides an anti-leech feature which stops people placing the direct download links on other websites.

Images

When you add a download, Composr automatically adds a specially-named gallery for it (if the galleries addon is installed). You will actually see a convenient 'add image' icon directly after adding the download, and you will also find an equivalent link on the download-view screen itself. The download gallery is displayed in-line, within the actual download-view screen. The Composr gallery system is used for adding and storage of the images. If you have no images added for the download yet there is a shortcut on the main download add/edit form for that; otherwise you can choose which of the images should also serve as the thumbnail for the download on the download add/edit form.

Viewing a download

(Click to enlarge)

Our download, listed in its category

(Click to enlarge)

The subcategory (where our download is being stored) is displayed

(Click to enlarge)

Downloads are accessed from the downloads module (site:downloads page-link, Content > Downloads on the default menus).

This link will take the user to the Home download category, from which they can browse through the categories until they find a download they want.

We understand how important it is for users to be able to navigate fast around a website, so we have also created a 'view the whole download tree' feature that they may use to jump straight to the category of their choosing; this is not linked in by default, but can be placed on menus by browsing for it in the menu editor's entry-point tree. The data for the tree is downloaded in a very compressed format, making it fast to load.

Deletion options are presented on the edit screen, as is the standard in Composr

(Click to enlarge)

Editing a download

(Click to enlarge)

When you edit a download, you get a choice to replace the file.

You can delete a download from the bottom of its edit form.

When deleting a download you get the option to leave the actual file on the server. This is something you will rarely want to do, as it is best to just let Composr manage the files inside your upload directories; however it is useful in the rare case that you added a second download to use the URL of the download about to be deleted.

Composr will never try to delete a file that is not inside an upload directory, and naturally it cannot delete the file at any arbitrary URL or any file for which there aren't sufficient file permissions.