[Drixevel]

...or you can just add an .htaccess username and password, strip out the users system in the code and make it just an editor without the fancy user system or anything. That's what i'm doing and if anybody tries to put it into the browser or load it up as well as use a frame for it, it requires a password which i only know. If you make the password random then they wouldn't be able to brute force it AND not many people would know the exact folder you put it in on your webhost so they wouldn't know where it is. Just to screw with people, i host the advertisements for TG on my personal website and not on my main website so their looking in the wrong place.

Bottom line: You don't need to go that in-depth with it Obsidian in order to keep your shit protected.