Is it possible to be able to restrict files that a browser can access? For instance, any files in the bin directory are automatically classified as not existant, but how can you extend this to additional files such as databases etc that work the site, that the user shouldn't be allowed to download?