Updated the htaccess file of the data folder. Now the user can only access the zip files.