Happy Holidays everyone...

I am working on a digital product which will be downloaded after receipt of an online payment. Nothing unusual about that except I've never done it before. I believe I have worked through the net-mechanics of setting up a link to the credit card processor, having a link back to a "thank you" page where you reveal the User ID, Password, and link to the download.

Here is my question: Do you assign a different User ID and Password to every customer? If you do, is there a cgi script that handles this, or do you do it manually? Do you email these to the customer, or update the thank you page automatically with a script?

I'm just trying to figure out how you set these things up to be an unattended money machine without the possibility of massive theft of your product through password distribution or theft.

Any help would be appreciated...

JDB