Hello, We are a small shop (1 1/2 developers) running our organizations sites. The sites are mostly content, but are beginning to have small database apps. When I arrived, there was no formal development or staging environment, so I'm trying to get that set up. We have no servers on site...we have dedicated virtual through Media Temple as our host. My thought was to just use a separate domain for development. My question is: Right now, another domain would be open for anyone to look at if they found it. Because we'll be using it to develop applications, we clearly don't want people able to get there before we've written fully well-thought-out and secure code. Is there a way to stop other people from accessing the server while still letting me access it? Also, what are people's thoughts on best practices for dev servers? (I've worked in an extremely large organization before where we had development, test, beta, and production. But that's beyond the needs we have right now.) Thanks!
More...
secure, external development environment?? 
