You can use a forced download code to make the pdf file download to the user's computer. Such a code allows you to define the name of the file as it will be downloaded, to be different from the real filename (which, in any case, is NOT revieled). This way, if anyone tries to download the file directly, simply doesn't find it (he gets a 404 error). Have a look at
http://www.vodahost.com/vodatalk/blu...-play-mp3.html
By changing the line
header("Content-Disposition: attachment; filename=$filename");
to be
header("Content-Disposition: attachment; filename=$user_filename");
the file will be downloaded with whatever name you like (Like "Price List")
whilst $filename is the full (path/filename) name of the actual file.
For $filename i usually use a
prefix_filename.pdf type, where the prefix is usually the md5() of $now = time(). So the file is actually saved on the server with the real name which will be something like
sfa463aedsae4s4s53as553sd4545e_filename.pdf but is downloaded on the users computer as
Price List