1. to your server
2. on another site via link.
3. through a payment processor.
What could and possibly should be the option is that. 1 & 3 should be internally managed; so the file is still uploaded to your server but the link is not accessible until the member has gone through the payment procedure. Therefore enabling the resources to be managed via the host site.