Jump to content

Can I move writable directories outside HTML tree?


Recommended Posts

My admins don't like having directories in the HTML tree that are writable by the web server.


Clearly several directories need to be writable by the system in order to upload attachments, upload images, update the cache and smarty cache, etc. However, it's a security issue having these writable directories in the HTML directory tree - imagine if someone were able to coax your server into writing an executable file or php file to your writable directories, then do arbitrary things to your server.


I was hoping that changing the constants in prestashop/config/defines.inc.php would allow me to move my img directory outside the HTML tree, but in my testing that did not work. It seems these directories must be somewhere in the HTML tree.


Is there a way to do this for the img directory? What about the smarty and cache directories?


thanks for any help or insight you can provide.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...