I also said that it is not full proof, no security is. The whole point of security now a days is to make it as hard as you can to break it. If you don't want your site hacked or its data comprimised, the 100% full proof solution is to unplug the server and distroy the data itself to prevent an inside job as well. Obviously, this is very extream and does not work for companies.