This forum has moved to a new location and is in read-only mode. Please visit talk.octobercms.com to access the new location.

danherd
danherd

I have never felt comfortable having a site's main front-end files and assets in the same folder as all the main application components.

Is there no way a folder (e.g. public_html) could be used to isolate the front-end files? I understand this will probably cause difficulties with things like themes. Just as it is, we're relying on the server configuration to hopefully block access to any compromising files. With all the front end stuff in a subfolder, this will never be an issue.

andrew
andrew

This has been raised several times. Here's two places to add your +1

Security Thread

Issue 122

Last updated

1-2 of 2

You cannot edit posts or make replies: the forum has moved to talk.octobercms.com.