Knowing the URL of the script will not help anyone if the admin directory is password protected. It not only protects the admin directory, but all subdirectories under the admin directory as well. If they know the URL and the commands and try to execute one of the functions, they will still be prompted for the username and password before the script will execute. If they cannot furnish the proper username and password, the script will not execute.

In addition, none of the data files or any other files will be accessible, via the web, if the admin directory is password protected using the .htaccess/.htpasswd scheme.

[This message has been edited by Bobsie (edited March 23, 1999).]