I'm using Joomla to manage my website. Certain pages of my website are restricted using Joomla's access levels to registered users.
On these restricted pages I include links to files which can be dowloaded
e.g a link to "dir1/file.zip"
where dir1 is a subdirectory of public_html.
This method is insecure because if a user types in the url
www.mywebsite.org/dir1/file.zip
they can download the file without having to login.
Is there a way I can restrict access to this file so that only registered users can download it?