I am developing a system which allows registered users (who could be anybody) to upload files. I\'ve block mime-types etc. to attempt to restrict the files to .doc, .docx a
See the answers to this similar question: Refer to a file outside the website tree for downloading purposes, which links to the PHP header function manual page.