Well PHP will grab the filename from the database and then I do $resultset = mysql_fetch_array($result)
With that I do www.website.com/files/$resultset['filename'];
That would prompt the user to authenticate so I'm not sure how to pass the page the username and password not to prompt the user then.