I have an e-commerce website, in the backend area I have a page creating a file on the go (without saving it on the server) with very sensitive data (credi cards details). In order to access the page authorized users have to log in.

The file is then downloaded with these commandes

[PHP]
header("Content-type: application/octet-stream");
header("Content-Disposition: attachment; filename=MB...