in reply to Restricting Download Access with CGI::Session

You'd want to check the seession for a valid user, then binmode STDOUT send the headers with the correct content-type and print the contents of the file to STDOUT

You'll perhaps want to send a 403 or something of the sort for folks without valid sessions too.

@_=qw; ask f00li5h to appear and remain for a moment of pretend better than a lifetime;;s;;@_[map hex,split'',B204316D8C2A4516DE];;y/05/os/&print;

In Section Seekers of Perl Wisdom