Published at LXer:
Sensitive information that only certain people need to have web access to must be secured. If sensitive or proprietary information is located on your web site and you do not want public access to this information, you must password it. An obscure file name with no links to it anywhere on the site will not keep the information secure. Security through obscurity does not work.
Read More...