534158 sql database reporting: website security

Two tasks are required: 1. My first website has database of clients who have and have not paid the subscription; their email address. I need an output where I have only the active members (subscription is only 3 months) in a csv or excel format. 2. My second website has pdf books for download. I would like to improve the security of the website such that only active member can download the books. Currently, anyone can do it if they know the web address.