Creating a Secure File Hosting Server for PDFs

Question

I\'m working to develop a website that allows clients to log in and see various PDFs saved on the server. These PDFs will be unique to the client and should no

Answer 1

Put the files outside of the webroot. Then using PHP pass the file though a script. That way no one can link to the file directly and bypass your controls. (Naturally make sure the script that does this only after verifying the user has permission to retrieve that file).

Sample PHP: