Almost there

Works fine, it will prevent most users from copying/downloading the protected contents. But without .htaccess rules it’s pretty easy to download the media files by directly pasting their urls in the browser.