Restrict media files to non-loged-in users

You can certainly put the link for a media file behind the login, but that won’t protect the file from someone who has the direct link. To accomplish that kind of restriction in a way that really shuts down outside access, you need to use .htaccess to restrict access based on file type.