Particular parts of a website I'm working on will have pictures not intended for the general public. It is already behind a password protection and the page has no-index no-follow rules. I'm concerned about images though.
One site said to enable
Then if someone goes to
http://www.companywebsite.com/robots.txt they would very easily be able to see where we're storing said private-images. However, they should get a 403 Forbidden error if they try to access that directory. However, I want to be as sure as possible that this is the best way.
Is there any other things to consider and implement to protect unwanted eyes from accessing images on a website? Trying to protect trade secrets so only registered dealers can see the information.