uploading files to dir on same level as httpdocs

I'm building a website where people can download documents after they've logged in. I would like to store this documents in a folder located at the same level as my httpdocs folder. The idea is that people who are browsing at the website can download this documents, but they should not be able to download it by filling in an URL. I'm also building a management tool where these files can be uploaded. Suggestions are more then welcome, Karel