I have a site that delivers a download link after a user purchases via PayPal IPN however after making a purchase, it would be super easy for people to figure out the structure and bypass the order system.
What I need is for some sort of security for the download. The files names themselves are scrambled but the download is based on the product ID.
Ideally, I would like the order to assign a unique order ID for the download, which is only valid for 3 days. Open to ideas, looking to have this completed pretty quick.