Place your PDF/MP4 files in a secure folder (preferably OUTSIDE public web root). Update the 'files.path' column to point to the full server path.