A friend of mine is trying to build a site that you would have to log into to download files. So, he wants to have files available for download that you can only get to after logging in.
It's relatively easy to make a log in page, but after someone logged in there would be nothing to stop them from simply copying the URL of the file they want to download and going directly to that URL the next time without logging in.
I suggested using ht access files to force a log in every time someone tried to access that directory but he insists there must be some way to use PHP.
So does anybody know of one?