Questions about prohibiting direct access to files

The following is a problem about direct access to files: an excel file is generated in the background and stored in a/B/test.xls. I do not want others to directly enter http ://*. com/a/B/test.xls. I hope that authorized people can access it. if they do not have the permission, they will automatically run and run. what should I do? Prohibit direct access to files
As follows:
Generate an excel file in the background and place it in a/B/test.xls. I do not want others to directly enter http ://*. com/a/B/test.xls. I hope that authorized people can access it. if they do not have the permission, they will automatically run and run. what should I do? Share:
------ Solution --------------------
The simplest is to save it to a directory other than the web.
------ Solution --------------------
Add a. htaccess file to the same directory as the entry file.
------ Solution --------------------
Use apache permission authentication. Add permissions to this directory.
------ Solution --------------------
Set directory permissions in apache conf