You should have 2 instances of your website. One being the development(the testing server) and one the production (the one the world sees). Typically, these are hosted on two servers with identical LAMP/WAMP configurations. You may want to set your "hosts.allow" setting to only let in certain people and block everyone else from your development server. I'm sure other people will have more information, but this will give you something to think about.