6 reputation
1
bio website
location
age
visits member for 3 years
seen Jan 7 '12 at 2:55

Jan
3
comment Apache security
I've been told that it's ok to store files outside of apache's scope, but another source said that you should not store anything outside of apache. My question is which method is more secure?
Jan
3
comment Apache security
My frontend directory contains only functions to render graphics/html and the index page. No credentials or any other security related information is stored there. My backend directory contains db connection information, scripts which process requests which will be sent to the frontend for rendering. A basic requests goes like this: index.php contains a phpController method which calls the appropriate backend class. The backend method makes a db connection, gathers the appropriate information, stores it into an array, then calls the frontend method to render the html, css, and js.
Dec
30
comment Apache security
I have a page which sends a request to the backend files, then after the data is gathered, I have it call a frontend file which renders the html.
Dec
27
comment Apache security
Inside of Apache's config file, where you set DocumentRoot, I have it set to public_html/front, which contains html, css, and js files. But I keep all the important php, db and everything inside public_html/back.
Dec
27
awarded  Student
Dec
27
comment Apache security
Everything works fine with the current setup, I'm not sure why there might be a security risk if my php security files are outside Apache's scope.
Dec
27
asked Apache security
Dec
26
asked Apache security