Can I protect access to non-php files?

[Brandin]

Another thing you can do is have the files in a non-publicly accessible area, then on request, generate a unique download link for that file? You can then use cron jobs to delete the files whenever the cron job runs. You'd need to do some research on copying, moving, etc files on a PHP request though.