The Users will be able to download only the views that you populate via php.
CodeIgniter is a MVC (Model-View-Controller) framework for a reason, it encapsulates the business logic from what can be accessed by users.
http://www.codeigniter.com/user_guide/overview/mvc.html
solved How to prevent website download, so someone can’t download my full website [duplicate]