title: Secure file storage in a server
body: <p>I have a job website, so there are number of cv's uploaded to the server and stored in a folder location which is public. i am just wondering what the security measures i can do in the Apache, php level to stop unauthorised people accessing other peoples cv's </p>
  
  <p>i have </p>
  
  <ol>
  <li>disabled directory browsing </li>
  <li>created false links in html which then maps in .htaccess to a another location</li>
  </ol>
  
  <p>..etc</p>
  
  <p>just wondering is there a way we can completely hide the file name appear in the browser url (may be with a header like application/pdf ..etc and read the content of the file on the fly) is this possible or is there a better way like store them in the MySQL DB ?</p>