In my experience there's no problem giving the internet guest account access to that folder... disable folder listings on it though.
As you're using a server side scripting language the users will not be able to simply view the code of the page and find out where the database is located...