0
OP Regular Newbie Apr 17, 2026 6:24pm

Severity: MEDIUM

Location: src/Controllers/FileController.php:222, 294, 369

Bug: Counter ticks every request, not only first download.

Fix: Gate incrementDownloadCount() on !$alreadyDownloaded.

Status: open. Will reply with remediation details when resolved.

0
Regular Newbie Apr 17, 2026 6:51pm

Resolved.

All three download paths in src/Controllers/FileController.php (download, playSid, launchEmulator) now gate FileUpload::incrementDownloadCount on the same !$alreadyDownloaded condition that already gated FileDownload::record. A user can no longer inflate a file's public download count by repeatedly hitting /files/download/{id} after their first paid download.

Locking this thread.

Log in or register to reply to this thread.

We use cookies to enhance your experience on 6502ish.com. Essential cookies keep the site running. Analytics cookies help us understand how the site is used. Cookie Settings | Privacy Policy