I made a very simple dashboard with HTML/PHP/JS (and a MySQL database) where some users (after a secure login with username and password) can access and insert some activities with details and attach a file in PDF format.
My dashboard is in a directory like
/var/www/my-dashboard and inside there is another directory with all the PDF file uploded by the users:
/var/www/my-dashboard/files with a structure like this:
The users have to login to the dashboard to insert an activity and upload the PDF file so a non-registered user can't do this. The problem is that a non-registered user with a specific link can access the PDF files from the internet (with a link like this:
I want to avoid this that these files can only be opened and viewed by the registered user. How can I implement this in PHP?