ZIP files accessable only from a PHP file

[selesfan87]

On our company site we have .zip files containing important information that we only want authorized users to download.

Is it possible to in some way make it so that certain ZIP files cannot be downloaded unless redirected to from a certain file and given permission?

Thanks for any help.

[markl999]

Put the zip files outside the documentroot and create a download.php script, for example. Have the download.php script check whatever auth is required then hand them the zip file with something like:

header("Content-Disposition: attachment; filename=$file");
header("Content-length: " . filesize($file));
header("Content-name: " . $file);
readfile('/path/to/the/zip/file.zip'); 

[selesfan87]

If someone knew the address, then they could download without auth?

[markl999]

If it's outside the documentroot you can't get to it directly.