For smart security, put the script that your cron job runs in a directory above your /cgi-bin/ and /www/ or /public_html/ directories.
This is because if your script is in, or under, your /public_html/ directory, then it can be executed via a browser by anyone anytime.