Why store the CakePHP files outside of the webroot?
For example, this is the way way that I have always been told to do it.
/home/username /app /cake /public_html index.php
I know its because of security, but why? its not like the users can view files in the /app/ folder anyways. The htaccess prevents that correct?
If the user was able to get a malicious script on my webserver it wouldn't matter if the /app/ folder was in the /public_html/ or outside of the webroot, they would still alter the files under the /app/ folder, right?
So why bother?