受 PHP 保护的文件访问

我几乎逐字使用马丁·巴克的代码/答案（PHP来保护PDF和DOC），唯一的区别是我保护的文件位于public_html文件夹上方的用户文件夹中

文件夹结构

/users/websupport
/public_html

要下载的文件位于：

/users/websupport/FileToDownload.pdf

下载.php文件位于

/public_html/download.php

但是Firefox告诉我它找不到文件在

Firefox找不到文件在下载.php时找不到文件。

我已经通过 ftp 验证了该文件。

如果将文件放在 webroot 之外，我需要向网站添加一些东西吗 .htaccess ？只是不知道我哪里出了问题。以下是下载中的代码.php

//check users is loged in and valid for download if not redirect them out
// YOU NEED TO ADD CODE HERE FOR THAT CHECK
// array of support file types for download script and there mimetype
$mimeTypes = array(
    'doc' => 'application/msword',
    'pdf' => 'application/pdf',
);
// set the file here (best of using a $_GET[])
$file = "../users/websupport/2011cv.pdf";
// gets the extension of the file to be loaded for searching array above
$ext = explode('.', $file);
$ext = end($ext);
// gets the file name to send to the browser to force download of file
$fileName = explode("/", $file);
$fileName = end($fileName);
// opens the file for reading and sends headers to browser
$fp = fopen($file,"r") ;
header("Content-Type: ".$mimeTypes[$ext]);
header('Content-Disposition: attachment; filename="'.$fileName.'"');
// reads file and send the raw code to browser
while (! feof($fp)) {
    $buff = fread($fp,4096);
    echo $buff;
}
// closes file after whe have finished reading it
fclose($fp);