The table files and the directories where they are
stored must have appropriate permissions, so that the text-db-api can
read and write to these files. This causes a side effect that these
table files also can be viewed directly with the browser, IF someknow
knows the location on the webserver where the reside.
To solve this problem you can place a .htacces file
like this in the directory where the tables files reside:
<Files>
Order deny,allow
Deny from all
</Files>
More information about .htaccess files can be found in
the internet