Forum

Thread tagged as: Question

Members' App

Hi,

I was wondering if the 'Resource Bucket" needs to be outside the public_html folder for any reason.

Garth Holmes

Garth Holmes 1 points

  • 6 years ago
Rachel Andrew

Rachel Andrew 394 points
Perch Support

If the file is in the public area then anyone - not just members - can link to and download the files.

Rachel Andrew said:

If the file is in the public area then anyone - not just members - can link to and download the files.

but is that only in the case that they'd know the URL in question?

I know Apache for example, will list directory contents where there is no index file but what if the file (index) is a html formatted page?

Drew McLellan

Drew McLellan 2638 points
Perch Support

Right - but if the file is outside the web root then there's no way to download it unless they go through your script which enforces your rules.

Hi Drew,

Are you saying that if the files are under public_html that any script won't work anyway?

Cheers

Drew McLellan

Drew McLellan 2638 points
Perch Support

It will work, but wouldn't offer any real protection.