CI & KCFinder integration with CKEditor & how to secure it

[eluser]ClaudioX[/eluser]
I trying to solve this too. Thinking in:
1 - erase the line in config/database.php:

Code:

<?php  if ( ! defined('BASEPATH')) exit('No direct script access allowed');

2 - access the database using database.php infos only by PHP and check if the session is active.

But i dont know if the first change will expose the aplication.

Anyone know more?