Dude you should slap some password protection on the admin and provider directories.
Actually while you are at it, you may want to rename those directories and alter top.inc.php to suit.
http://forum.x-cart.com/viewtopic.php?t=7331
Good luck with your store!