How to protect uploaded files?

Hi, in my new file upload page, I wish to allow Users to view files online without downloading. This works very easily for PDF files by linking to a URL directly to the PDF or image file. Other files automatically download.

But this amounts to a security hole, that anyone can use a simple URL to access what maybe confidential uploaded files.

I have modified the .htaccess to stop (i thought) unauthorised access to files of the website, and that works mostly. Are there any suggestions on how to plug this hole?

Ideally, I would like the users to online view a PDF or image via a Wappler component, utilising Wappler’s security measures. Is there such a one?