.htaccess file for protecting user data and password files

Hello there,
I've got a cgi-bin directory with some scripts. In one users' folder
(users of a message board), plain text files contain info and passwords.

The .htaccess file for this folder/directory reads:

<Limit GET POST HEAD>
order deny,allow
deny from all
</Limit>

Is this sufficient to keep these files from being downloaded or otherwise
accessed outside of proper use of the board? Trying to grab any of these
files from a browser only results in a misconfiguration (500) error, but
I'm a little uncomfortable with this, as this does show that the files
exist.

Many thanks,
--
Swedey

Swedey <swedey.DeleteThis@gmx.de> wrote:
 > Is this sufficient to keep these files from being downloaded or otherwise
 > accessed outside of proper use of the board?

Well, if you can't put them somewhere out of reach (in the conf directory
of the web server for example)...

Davide

--
| Reporter, n.: A writer who guesses his way to the truth and dispels
| it with a tempest of words. -- Ambrose Bierce, "The Devil's
| Dictionary"
|<!-- ~MESSAGE_AFTER~ -->