diff --git a/README.md b/README.md
index e0712addc..a1c7920f1 100755
--- a/README.md
+++ b/README.md
@@ -6,6 +6,16 @@ Abandon Pocket, Instapaper and other Readability service : adopt poche. It is th
 
 ...
 
+## Security
+
+You **have** to protect your db/poche.sqlite file. Modify the virtual host of your website to add this condition :
+```apache
+<Files ~ "\.sqlite$">
+    Order allow,deny
+    Deny from all
+</Files>
+```
+
 ## License
 Copyright © 2010-2013 Nicolas Lœuillet <nicolas@loeuillet.org>
 This work is free. You can redistribute it and/or modify it under the
diff --git a/poche.sqlite b/db/poche.sqlite
similarity index 100%
rename from poche.sqlite
rename to db/poche.sqlite
diff --git a/index.php b/index.php
index be1ebef97..a27f19935 100755
--- a/index.php
+++ b/index.php
@@ -25,7 +25,7 @@
 
 try
 {
-    $db_handle = new PDO('sqlite:poche.sqlite');
+    $db_handle = new PDO('sqlite:db/poche.sqlite');
     $db_handle->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 }
 catch (Exception $e)