- Recognizable directory names -- if it is a private script use folders that only you might recognize.
- Proper directory and file permissions.
- Private directories and files placed or written above the Document Root's path e.g.; /home/user/[site]/off web server root/directory/files
- A blank index.html -- Apache2 and Nginx default to 403 and 404 respectively.
A logical inheritance of directories -- the 'directory tree' -- what folder should be inside what folder.