vulnerability ?

[Felix]

in your .htaccess file:

Code:

RewriteEngine on
RewriteRule ^yourfile.xml$ 404.html

where your 404.html could be either a page not found
or any garbage page, which will display as invalid url.

or use this:

Code:

<FilesMatch ".(xml)$">
  order allow,deny
  deny from all
</FilesMatch>

== tagged - password protect xml ==