If you wish to increase security by
hiding the location of your CodeIgniter files you can rename the system and application folders to
something more private. Codeigniter php
frameworks will show you how to use it. You must open your main index.php file and set the $system_folder and $application_folder variables at the top of the file with the new name you've
chosen. For the best security, both the system and any application folders should
be placed above web root so that they are not directly accessible via a
browser. By default, .htaccess files are included in each folder to help
prevent direct access, but it is best to remove them from public access entirely
in case the web server configuration changes or doesn't abide by the .htaccess.
After moving them, open your main index.php file and set the $system_folder and $application_folder variables,
preferably with a full path, e.g. /www/MyUser/system.
One additional measure to take in production environments is to disable PHP
error reporting and any other development-only functionality. In codeIgniter,
this can be done by setting the ENVIRONMENT constant,
which is more fully described on the security page of codeigniter user manual. I think
that’s all, see you at another post of Codeigniter php frameworks.
No comments:
Post a Comment