even though I've had a sale and that buyer was able to download, I still haven't been able to complete a paypal test transaction -- paypal works fine, but the buyer doesn't get any download info and the cart has no information about how to download
---------------------------
so I don't know what the actual download link consists of -- is it just a direct link to the actual image? instead could you make a unique code for the transaction pointing to a page that has the download? (similar to the symbio-xml-cache files.)
this would solve several problems:
-- eliminate the exposure if a guest (no register) policy is in effect
- let the site owner delete the download after a specified time
- give the owner a way to assist the buyer if something goes wrong (rather than having to dig out the file manually)