I am building a site that is permissions based. The user can add or remove read permissions to the public for pages as well as files.
What is the best way to serve files that are protected, using php? I have seen things like www.mysite.com/download?file=filename.jpg or something like that, but I prefer clean paths.
Also, if my files are not password protected, should I just bypass php, and have Apache serve them directly?
Just looking for the best methods here for both.