Is it secure for me to have my catalog in my main OSCommerce directory? Should I do anything with permissions to make it more secure?

I'm a bit new to ecommerce. Any advice on keeping things away from hackers?

Cheers,
Greg