There is no danger for a search engine to index a hidden report. First, if there is no hyperlink pointing to the report, then the search engine won't know the existence of such report. Second, we have a implemented server-side security preventing access to any page without the proper password. In other words, the server won't transmit the page to the client (browser or search engine) without the correct password. Unless Google (or any other search engine) guesses your password, no pages will be transmitted, and therefore nothing indexed. By the way, a search engine cannot guess a password because the page http://familytrees.genopro.com/Password-Required.aspx is just a form like any other web form. A search engine has no clue it must enter something in it to access the report. Besides, search engines would have bad reputations to try to guess passwords to access hidden pages. All major search engines do honor the instructions Robots.txt to avoid legal problems.