Your public web application needs to provide access to binary files for registered users only.

Host the files on a public external file sharing service.

Redirect to the file which resides in the server's document root

Use PHP to send the file to the client, using the header() function to set appropriate HTTP headers

PHP is used for service HTML content, not binary content