We are using a PHP scripting for tunnelling file downloads, since we don\'t want to expose the absolute path of downloadable file:
header(\"Content-Type: $ct
This worked very well for me: https://github.com/pomle/php-serveFilePartial