[BirdOPrey5]

Originally Posted by Simon Lloyd

Chris, thats not an attack on you, i'm simply pointing out they have options, if you want to pm me i'll tell you how to prevent that.

If you check you'll see that i registered at your site, that was the option i chose.

Why does someone have to PM you for the answer? Isn't that like asking someone to register?

Everyone's /includes/ directory should be password protected to begin with. For those with apache an .htaccess password is the best way.

Those with cpanel will have a "Password Protect Directory" icon and they can follow the directions to password protect their /includes/ directory. The username/password should be as difficult as possible because no one (including the admin) will ever need to use it. There is no reason anyone should ever have to browse the /includes/ folder and it won't stop the forum from working.

Without cpanel there are plenty of how-tos on Google on how to setup an .htaccess password.

While at it I suggest password protecting your /admincp/ directory too- however this one you will need to give the username/password to any other Admins on your site. Having this can prevent a lot of hacks/security risks from being as damaging as they could be.