I am using a php login system which uses sessions and a mysql database......i will have a downloads page which will only be visible if logged in....my client wants to have files on this page that can only be downloaded if logged in.
How would i do this? so even if someone typed the file url in directly they would still have to login?