[UPHPU] Secure PHP file serving.

[Andrew kain]

Hello list, I am looking for the best way to serve secure sensitive files
uploaded to a PHP server. I only want authenticated users to be able to view
these files (jpg, pdf, etc). Usually anyone can view files uploaded to any
directory. I'm guessing the best way would be to upload the files outside of
the web root that way they are not directly accessable from the web server.
My question is, what would be the next step? To authenticate the session and
mod re-write to direct the user to the secured area? Can anyone with
any experience with this please give some pointers? thank you much in
advance.

-bob