Restricting certain files

Hello guys,

we have a directory that is such as http://products.ourdomain.com

and we have certain files  (not all in that folder ) that should be restricted to logged in users.

Which is better

1. Keep both files in the same folder

2. Seperate the restricted files to another sub folder ?

 

And if we are to keep them in the same folder, how do we add restrictions to certain files ?

Thanks

Ehi
...