Page 1 of 1

Security: moving files and folders out of the public directory

Posted: Sat Mar 16, 2024 3:19 am
by srumberg
Version of script: 3.2.2
What terms did you try when SEARCHING for a solution: public folder, non-public, security

Currently, all my HESK files are in the /public_html folder. For security, I would like to move as many files and folder as possible to a non-publicly accessible location, outside of the public web folder.

Can this be done with the current code base? If not, would accomplishing this require significant modification to the code, or would the required modifications be relatively minor?

For example, my current set up is:

Code: Select all

/public_html
     /mysite
          /support   <--- HESK's root folder
               index.php
               /admin
               /attachments
               /cache
               /cron
               /css
               /inc
               /js
               /language
               /theme

I would like the file arrangement to be:

Code: Select all

/non_public
     /mysite
          /support   <--- HESK's root folder for NON-publicly accessible files
               /admin
               /attachments
               /cache
               /cron
               /inc
               /language
               /theme

/public_html
     /mysite
          /support   <--- HESK's root folder, publicly-accessible files only
               index.php
               /css
               /js

Re: Security: moving files and folders out of the public directory

Posted: Sat Mar 16, 2024 8:05 am
by Klemen
That is not possible with the current set up and would require a substantial code rewrite.

Re: Security: moving files and folders out of the public directory

Posted: Sat Mar 16, 2024 4:54 pm
by srumberg
Thank you, Klemen