You could use the S3MediaVault plugin from Ravi and Veena (the developers of DAP).

It only allows folks to download files from the pages you specify.

And if your download page is already on a protected member page, then this adds a second layer of protection.

http://s3mediavault.com/

http://www.0to5blog.com/tips/protecting-wordpress-media-uploads-unless-user-is-logged-in/

I found this to be very effective. You can use MM functions in the php file to determine who has access to the file after signing in.

I use a plugin called S3FlowShield. It works in conjunction with Amazon S3, effectively timing out a file link after a designated number of seconds. So, people who have access to the membership page will be able to download the content, but if they share the link to the file with a non-member, the link won't work.

Answer