I agree completely with what you said. In fact, the root of a web site should contain minimal files (index file, cascading style sheet, robot.txt and site icon). The rest of your pages/scripts should be in deiretories that only you, the programmer knows about.
If someone tries to hack your...