How do I block un-logged front end users from certain files or folders?

Hi everyone.

I've set up a login section with "Login 1.5.2", everything works ok, I set up the members, assigned roles, etc.

Now something I didn't think of, showed up. In the private area I have links to pdf files stored in my assets folder:

"assets/pdfs/pdf1.pdf"

Is there a way to block users from copy-pasting the url and going directly to my pdf file?

Because even though the user has to be logged in the members area to access the pdfs, nothing stops him/her from just right clicking the link and copying the url and sending it to the rest of the world.

I also thought of password protecting the pdfs (which I will) but if someone just types:

www.mydomain.com/assets/pdfs

They'll get the whole list of pdfs.

Am I doing something wrong? Should I use a different folder for stuff like this?

Thank you in advance for any help or pointers.

You would want to use http://modx.com/extras/package/filelister or http://modx.com/extras/package/filedownloadr to protect the paths.

Awesome, thanks AMDbuilder.