Re: protecting directories and files inside them based on session variables

<snip> http://www.mydomain.com/private/some_privat_file.doc and downloading this file! I need a way to make this file only accessible to users who have a user_id in there session - is this possible? Or is my only alternative to password protect this directory using the webserver and force users to re-authenticate in order to download there files? </snip> Move them outside of the website directory and use readfile to display them to the user.