I'm developing a website for a large corporation. They release financial documents on specific dates and times. I've developed a custom form to upload these pdfs to articles, and custom loops that display only these attachments on specific pages. When the date of the article is set in the future, the attachments are released when they should and the system works pretty well.
The only thing is, that for the company it's super-important that there is no access to the attachment-files before the date when it's supposed to come out. So if anyone can guess the name of the attachment they can just go to wp-content/uploads/financialdocument10.pdf and read it before it's supposed to come out.
Is there any ideas how to prevent this? My only idea so far is to add some random characters to the file name so it's impossible to deduce it's name on the the basis of previous filenames.