phranque - 10:34 pm on Sep 24, 2010 (gmt 0)

set up a development subdomain such as dev.example.com and install your development version of the site in a separate directory.
use HTTP Basic Authentication [w3.org] to prevent unauthorized access, for example unintended requests by search engine crawlers.