I finally got my head round this
if you have apache, mod_rewrite and can alter your .htaccess file — add this..
RewriteEngine On
RewriteRule ^test.php actualurl
so anyone clicking on (or typing in)YOURURL/test.php will see the contents of the actualurl and it will still say yoururl/test.php in the address bar.