Some users asked me before how to protect files inside a directory with the Access_user class. I think most of them think about the protection in a way like a protection using .htaccess.
Actually you need some more:
- Protect the directory with .htaccess (the login/password) is secret to all users)
- You need a download script to get this files from that directory (PHP doesn't need to login and will send the data to the browser).
- Protect this download script with the Access_user class, the visitor has to login first before he is able to access those file
If you follow these steps you have a solution with a web based authentication system and protected content using htaccess.