I've got downloads configuredly fine and all is well, but my client wants to be able to send the URLs of the /download folder to a reseller so they can download the files to sell on their store.

My problem, accessing /store/download brings up a user/pass prompt, so I enter the cart's administrator user/pass thinking I might get access. No dice.

Is there anyway to get these files without taking the htaccess rules away for a couple hours while the reseller downloads them?

I could also provide FTP access to the folder, but wanted to find out if there is a more secure way of doing this first (I don't want a reseller messing about the site's files).