Hi, Some servers have issues with the “.htaccess and .htpasswd files”. In this case you will need to fix your server config. It is not that big of a deal to not have this access control files in the downloads directory because You can put your downloadable files anywhere you want as long as the plugin can access them. As explained above no one but the plugin itself knows where the file is truely located. When the link is sent out it will be encrypted and will not reveal the true location so the security is not compromised. If you have the empty “index.html” file in this directory even if someone was to find the location and browse the folder they will get a blank page.
Without knowing the path or folders on your server it is impossible to find a file…. specially, if your URL looks something like the following: