<?php

// URL: /javascript.js -- internal redirect with mod_rewrite --> /getfilebysession.php?file=javascript.js
session_start();

if (!empty($_SESSION["login"])) { // user logged in
    echo file_get_contents($_GET["file"]);
} else { // otherwise
    http_response_code(403);
}