secure exports dir
deny access to export dir
secure DL through PHP