Something which I was wondering about with Drupal was the fact that both cron.php and update.php are public reachable files (Even though you only can reach update.php if you are logged in). Don't think this pose any really danger unless you do heavy tasks in your drupal cron jobs. Anyhow: I decided to change that. In my configuration for Apache I placed something like this:

Which will prevent anyone from seeing those two files. Still I need to do some cron work, so I installed the drush project on my server, and made the drush script do the cron work. I put something like this in the crontab:

Which means that every hour at the 45Th minute, we will run the cron jobs for my website.