Deep linking to a URL of a download is obviated by the generation of a dynamic symbolic system link. When a user is at a download page, the HTML source for the displayed download button does not contain the URL of the download site. Selection of the button sends as form values the product ID and a session ID to the server which generates a dynamic link. This link is returned to the browser to redirect it to the download site. The link is further set to expire after the session so that, even if the link is captured, after expiration it will be unable to reach the download site.