Thanks Corporal for pointing me in the right direction and helping me learn more. I will use your pointers and see what I can and can not do with my host.

My host offers turning indexing off for each folder. I followed their advice and not have the ".htaccess" in every folder that I applied turn indexing off to.

Question... Are there other measures I should take to protect my site?

I have been unable to make the allow_url_fopen happen. I will ask my host to make the change on this one.

Thanks Corporal.

It's nice to have someone answer your questions.