Setting up a staging site, but want it hidden...

[Feznizzle]

Hi,

I'm using a subdomain (staging.MySite.com) to mirror a live site.

I don't know if Search Engines have a way to discover subdomains, but to prevent them from visiting/indexing, this is what I did to my robots.txt file:
User-Agent: *
Disallow: /

Is there anything else I should do? Theoretically, if somebody stumbles in they could actually place an order. But I don't want to disable the store (turn it into a showcase) because that changes the look of things I'm working on. Also, I'm trying not to make any major setting changes so that I can transfer the databases back and forth.

Thoughts?

[mc12345678]

Could place the site in maintenance mode...

[gilby]

Could place the site in maintenance mode...

and add your IP address so that only you can access the site