We have a web portal that is going to be running under a subdomain (e.g. sub.domain.com) If the DNS A record of the parent domain (e.g. domain.com) was changed in error to point at the server IP address, as well as the subdomain A record, would you normally expect the entire contents of the server to be publically available? This actually happened to us, and I'm trying to determine whether the developers could/should have had some sort of security (an htaccess file?) to prevent the data being made available in this way and whether they were negligent.

thank you