I tried to reply a few times last night but was having problems. You're absolutely right about timbthumb. I was referring to bike in isolation, which of course

I tried to reply a few times last night but was having problems. You're absolutely right about timbthumb. I was referring to bike in isolation, which of course it never will be. Having said that, the same applies to phpmyadmin and other apps that you might have. Indeed, timbthumb is a common way of breaking into weak wordpress themes and plugins. Just to be clear I wasn't suggesting using a random folder name. I've never been one for security by obscurity, but by keeping anything you don't want near the Internet restricted from the great unwashed (and by following an appropriate application security strategy) then you have a better chance than just putting this under /bike and open to the world.