I have a script that takes a key from $_GET[\'key\'] , looks up the location in a database and uses the readfile together with some headers to present a download for the use
Just a hint, if someone (like me) is facing problems with directly entering a filedownload into the address bar using a secured https-request. There is a IE bug that is causing this download to fail:
http://support.microsoft.com/kb/323308/en-us
Only workaround seems to be setting the cache-headers according to the article.