Illusion of security and restricted content. Downloads.

if (isset($_POST['download_file'])) { // <--- the id.
// do the process
    $result = dbquery("SELECT * FORM ".DB_DOWNLOADS." WHERE ".group_access('download_access')." download_id='".intval($_POST['download_file'])."'");
   $data = dbarray($result); // this is the file record.

   $data['download_source'] = // this is your download source
  
}

RedirectMatch 301 /blog(.*) /$1

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteRule ^.+$ ../index.php [L]
</IfModule>

<?php
/*-------------------------------------------------------+
| PHPFusion Content Management System
| Copyright (C) PHPFusion Inc
| https://www.php-fusion.co.uk/
+--------------------------------------------------------*
| Filename: downloads/index.php
| Author: Frederick MC Chan (Hien)
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "../maincore.php";
$request = pathinfo($_SERVER['REQUEST_URI']);
$result = dbquery("SELECT download_file FROM ".DB_DOWNLOADS." WHERE ".groupaccess('download_visibility')." AND download_file='".stripinput(trim(preg_replace("/ +/i", " ", censorwords($request['basename'])))."' ");

if (dbrows($result)>0) {
   $data = dbarray($result);
   require_once INCLUDES."class.httpdownload.php";
   $object = new httpdownload;
   $object->set_byfile(DOWNLOADS."/files/".$data['download_file']);
   $object->use_resume = true;
   $object->download();
}