thanks for all your help i seem to have got it working now using permissions 777, which is not something i usually like to do as always concerns me leaving a folder writable to everyone!
but seems to prevent unwanted downloading which is what i wanted.
thanks again