This plugin can be used to prevent direct access to WordPress uploads.

Manage and protect your downloads in WordPress with secure access, categories, and powerful file sharing.