Let's say I lock down my site through .htaccess and say
DENY FROM ALL
ALLOW FROM myip
how involved is it for a hacker to to simply spoof their IP address to match whatever mine is and gain access?
For that matter, is the .htaccess secure enough to lock down specific files/directories?