Why on earth do you have a file - ANY FILE - where it can be seen? Move the file out of the document root, or any document area where it can be seen. Change the permissions so that only the script can read and write it. This is one of the cardinal rules of web site building - if there is the most remote possibilitty that someone can see or modify a file they inevitably will, and far sooner than you anticipate.