In the past you have stated that "files are stored in a folder that contains a .htaccess to protect it"
If a file is made public, anyone can click on it and download it. Why can't they play it instead? Making files only downloadable seems less protective than just allowing them to be played.
Any suggestions on a workaround?