Doesn't solve the issue of the data being available on a public server, though. Any piece of code run by the web server would most likely have access to those d

Doesn't solve the issue of the data being available on a public server, though. Any piece of code run by the web server would most likely have access to those directories, as well as any other static content in the web root...