Membatasi download pada modul elearning SIKOLAG v.1

Assalam, untuk membuatnya dibutuhkan 1 filed lagi di table download mas,..
Misal filed status enum('umum','khusus'),..
 
Lalu pada file download.php tambahkan saja kondisi :
$cek = mysql_fetch_array(mysql_query("SELECT * FROM download where nama_file='$filename'"));
 if ($cek['status']=='khusus' AND $_SESSION[leveluser] != ''){
  mysql_query("update download set hits=hits+1 where nama_file='$filename'");
  header("Content-Type: octet/stream");
  header("Pragma: private"); 
  header("Expires: 0");
  header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
  header("Cache-Control: private",false); 
  header("Content-Type: $ctype");
  header("Content-Disposition: attachment; filename=\"".basename($filename)."\";" );
  header("Content-Transfer-Encoding: binary");
  header("Content-Length: ".filesize($direktori.$filename));
  readfile("$direktori$filename");
  exit(); 
 }elseif ($cek['status']=='umum'){
  mysql_query("update download set hits=hits+1 where nama_file='$filename'");
  header("Content-Type: octet/stream");
  header("Pragma: private"); 
  header("Expires: 0");
  header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
  header("Cache-Control: private",false); 
  header("Content-Type: $ctype");
  header("Content-Disposition: attachment; filename=\"".basename($filename)."\";" );
  header("Content-Transfer-Encoding: binary");
  header("Content-Length: ".filesize($direktori.$filename));
  readfile("$direktori$filename");
  exit(); 
 }else{
  echo "<h1>Access forbidden!</h1>
   <p>Maaf, file yang Anda download sudah tidak tersedia atau filenya (direktorinya) telah diproteksi. <br /></p>";
 }