What about creating subdirs on a download dir of the server by random md5 hashes (tailed to 8 chars, better....) and keep the original filename ?
Like for example Java SDK is downloadable from the support site.
This way, any user should pass through the attachment php and couldn't be able to download the file directly as he doesn't know the full path ... !?!?
Thanks
|