Beginning with eStore 5.6.6 and higher, a new feature called Authenticated Page Redirect (APR) is supported.
Authenticated Page Redirect (APR) allows you to offer secure one-off access to WordPress pages and posts, without requiring the services of a membership plugin. You might find this capability useful for selling access to something like an event or time specific page or post, which may in turn provide access to live streaming video.
The security mechanism used by APR is an encrypted session cookie; the APR Cookie. Each APR cookie is specific to a particular permalink, and contains encrypted timing information. On the pages being protected by APR, called APR Targets, an APR shortcode encloses the content being protected. Content enclosed by an APR shortcode will only be displayed if one of the following specified conditions are met:
1. An APR cookie EXISTS in the current browser session.
2. An APR cookie exists and is LESS THAN an a specified number of minutes old.
3. An APR cookes DOES NOT EXIST in the current browser session.
4. An APR cookie either does not exist or an existing cookie is OLDER THAN a specified number of minutes old.
To setup a permalink as a digital product, create the page or post that will become the APR target. Enclose content you want protected using the following shortcodes:
[wp_eStore_APR expiry=0 status=unexpired] the_content [/wp_eStore_APR]
Use this shortcode to display the_content only if an APR cookie, keyed to this page or post, EXISTS in the current browser session.
[wp_eStore_APR expiry=N status=unexpired] the_content [/wp_eStore_APR]
Use this shortcode to display the_content only if the existing APR cookie is LESS THAN 'N' minutes old. If an expiry is not specified, then the default of zero is used.
[wp_eStore_APR expiry=0 status=expired] the_content [/wp_eStore_APR]
Use this shortcode to display the_content only if an APR cookie, keyed to this page or post, DOES NOT EXIST in the current browser session.
[wp_eStore_APR expiry=N status=expired] the_content [/wp_eStore_APR]
Use this shortcode to display the_content only if an APR cookie does not exist or if an existing cookie is OLDER THAN 'N' minutes old. If an expiry is not specified, then the default of zero is used.
[wp_eStore_APR] the_content [/wp_eStore_APR]
Uses default values of zero for the expiry and 'unexpired' for the status. This is functionally equivalent to the shortcode:
[wp_eStore_APR expiry=0 status=unexpired] the_content [/wp_eStore_APR]
[wp_eStore_APR status=help]
Will be replaced with a Unix-style man page..
Next, make sure that the permalink you will be using works. Copy and paste it into the address bar of your browser. Specifically, ensure that the permalink you think you are going to use does not get modified by WordPress. If the permalink changes, then either fix the problem or use the resulting URL as the link you will use for the APR target URI.
Setup your digital product, using the URI of the APR target in the Digital Product URL field. CHANGE the URI scheme from 'http' to 'aprtp' or from 'https' to 'aprtps' in the Digital Product URL field.
Now, whenever an encrypted link, pointing to an APR target is processed by eStore; an APR cookie will be issued, before the browser is redirected to the APR target, by the download manager script.
Limitations: If an APR target contains the 'nextpage' tag, only content on the first page will be protected by the APR shortcodes.
