To protect download links in WordPress you'll need to implement some tweaks in the .htaccess file. Most WordPress download plugins already have such tweaks built-in. You can also use a plugin such as Prevent Direct Access plugin.