title: Using random folder name on web server to restrict access to it - bad idea?
body: <p>Lets say I have "<strong>admin</strong>" folder in my public_html and I don't want anyone except me to be able to access it. What if instead of password protecting it (using apache htaccess) I just rename it to "<strong>admin-7815696ecbf1c96e6894b779456d330e</strong>" and leave it open (with disabled folder indexes of course)? </p>
  
  <p>People usually freak out from such "solution" as it seems extremely vulnerable. But is it really any worse than password protecting? I can't think about any major security risks comparing to password protecting. Would anyone be ever able to find out a name of this folder?</p>