|
.htaccess is the best way to go about it. But if someone manually starts up the Download manager program they spoof the refferer and you can't block it.
Only other way I can think of is to generate a cookie that is required for all downloads.. or enter a code when entering the site to identify the user as a user.. as apposed to a bot.
|