Originally Posted by Fungus

Well then they can view the source code and find that file name.php and add the domain name/filename.php and blam there you go they will have what you do not want them to have!

Damn as I was typing this out I was beating to it lol