well parsing access logs, doesn't do the trick because each time a user tries to download a file, it actually calls my php script

then the php script forwards with header and NginxXSendfile the file, then loses of course control..

so parsing logs won't do any trick becase it's the same effect