Server Setup non-Apache warning on Windows server

[Draxeiro]

...but make sure your xml files in data and backups folders are protected, that is, not viewable with a browser.

Gents,

This website was recently launched. Did some checking with regards to your warnings to protect things.

Whereas the folders can't be reached it DOES show the contents of the xml files. In the control panel of this host there is no option to protect anything so I contacted them.

They are offering to move the site to a newer windows server that runs the Helicon APE module which allows for folders to be protected with a user name and password.

Is that what you were suggesting with regards to protecting them? Or can it be done differently too on a windows server and doesn't this host have a clue with regards to this subject?

If the latter is the case I will advice the client to move to a hosting party that runs Apache.

Please advice.