WP plugin: Secure Files Allows you to safely upload and download documents stored outside of your web document root for security purposes.
This is great for people using plugins like Registered Only that secure your WordPress blog (Posts, Pages, etc). The problem with these plugins is that your loose files aren’t protected - only the contents of your WordPress database. So, any images or other documents you’ve uploaded are easily accessible to those who aren’t authenticated via a plugin like Registered Only. This plugin aims to solve this problem.
Read full article: Secure Files at almost effortless