grahamgr3 Posted June 11, 2015 Share Posted June 11, 2015 Here is my directory structure currently in the public html folder. uploaded_images (folder) allmyotherphpfiles.php allmyotherphpfiles.php allmyotherphpfiles.php allmyotherphpfiles.php Should the uploaded_images (folder) be stored outside the public html folder, so that hackers can't hack that folder, or is it safe to leave my folder like it is now. Link to comment Share on other sites More sharing options...
Larry Posted June 13, 2015 Share Posted June 13, 2015 I assume the uploaded_images folder is publicly writable? If so, it'd be better if it were outside of the web directory. But if that's not possible, then add lots of code that protects what can be moved into that folder and what can be served from it. Link to comment Share on other sites More sharing options...
Recommended Posts