Security: moving files and folders out of the public directory

[srumberg]

Version of script: 3.2.2
What terms did you try when SEARCHING for a solution: public folder, non-public, security

Currently, all my HESK files are in the /public_html folder. For security, I would like to move as many files and folder as possible to a non-publicly accessible location, outside of the public web folder.

Can this be done with the current code base? If not, would accomplishing this require significant modification to the code, or would the required modifications be relatively minor?

For example, my current set up is:

Code: Select all

/public_html
     /mysite
          /support   <--- HESK's root folder
               index.php
               /admin
               /attachments
               /cache
               /cron
               /css
               /inc
               /js
               /language
               /theme

I would like the file arrangement to be:

Code: Select all

/non_public
     /mysite
          /support   <--- HESK's root folder for NON-publicly accessible files
               /admin
               /attachments
               /cache
               /cron
               /inc
               /language
               /theme

/public_html
     /mysite
          /support   <--- HESK's root folder, publicly-accessible files only
               index.php
               /css
               /js

[Klemen]

That is not possible with the current set up and would require a substantial code rewrite.

[srumberg]

Thank you, Klemen