i changed the .htaccess file as per above but not the other bit and it all seems to work fine, but i dont want to leave my site susceptible to hackers, so am i ok or not?

thanks.