Hi-

I have a site that is currently only selling 1 mp3 song. I have the product setup, including a 30 second demo and after purchase the download proceeds smoothly.

The problem I'm having is that if someone navigates to:
www.site.com/media/

They can download the full mp3 song without paying. How do I prevent this from happening?