[forgeron]

If I delete index.php I can still access all topics by typing their specific URL. (And I guess google can still index them)

So I guess password protecting just index.php is not sufficient..