Yes I understand that. but lets say for the time being dedicated hosting is out of the price range of my client..so I need to at least thing of a way of attempting to secure these files...
for example if the create a folder structure thats quite deep and never show the folder structure in the URL using .HTACCESS that could be one way of to prevent anyone from guessing the location right?
or perhaps storing them on a seperate domain account?
any advice on protecting these files without dedicated hosting would be appriciated :)