ASP.NET secure download after logging in with Session files contained in ASP.NET directory

Everytime I Type in the exact path to my file I can play it even without being logged in. I want to make it where开发者_运维技巧 I have the files in my computer (not in a database in the computer or someone else's) I log in and I can download them from whatever computer I logged in to my site with. Direct path I want to be redirected or not available to let download. Only those logged in can download... even if everyone knows the path to the file. Possible? Appreciate your help!!!

Create an HttpModule and on the BeginRequest method check if the request is being made to a file you need to protect, if so, return a 403 https status code.