What's the best way to protect files?

I have a list of files (e.g. images, xmls, pdfs) stored in a folder, called library. Now, the problem is I need to protect some of these files for members (stored in database, authenticated upon login). What is the best way to do that? Is there an easy but also secure way to implement that without much hosting configuration, but more on application config?

 
...