The best practice is to move all non-public files and folders to a directory that is not web accessible. If you can't do that (most hosts give that ability though), then you can protect files/folders via .htaccess (on apache). You can also clear that compiled file with:
php artisan clear-compiled
Sign in to participate in this thread!
Laravel
Laravel News
Laracasts
Laravel Podcast