should I upload my scripts directly under my main domain in my webhosting?

Whenever using scripts you do not want to give public access to, it is best to use a separate directory, however, this also depends on how the script was coded.

Some scripts are designed and programmed to be run from the root, in which case you have no choice.

However, if the script can be run properly from sub-directories, I would suggest placing it in it's own sub-directory as this also makes for clean and easy organization.

Another option is to create a sub-domain just for private scripts. You could name it something like privatescripts.abcd.com (or something funky that no one will guess) and upload private scripts into their own sub-directories of the sub-domain. This will also ensure visitors will not see or use the script as well as provide more organization as well.

One thing to remember though, if the scripts function is to call to or from other sites, your requests may be seen within the other sites' log files, so in a case like this, it is never completely hidden.

HTH

EDIT: Also, by using a sub-domain, or even a sub-directory in your main domain, you can set your robots.txt file so that the search engines will not index that directory or sub-domain. Do a search on "G" for "robots.txt" and you should get all the info you need for dis-allowing your scripts from being indexed by the search engines.

thx jonathon. You help me a lot. I'll do that, mate.