Moving code to Google Code

I'm shortly (<1 month) going to be posting TreeTapper's backend code to Google Code hosting (final site at http://code.google.com/p/treetapper/). I'll have all the relevant php files (except the one that has the database login information [I hope]) but not basic images. If anyone has any advice about things to watch out for when posting code of this sort, please let me know [I'm concerned about exposing security vulnerabilities -- don't want to rely on "security through obscurity", but if it helps...].