There should be no redundant programs in the web directory (security considerations)_PHP tutorial

Although some judgments and restrictions will be added to these procedures. But in addition to library files, there are also temporary files, template files, etc. These files should not be accessed directly through the web. Regardless of security or code management, store inaccessible files in the web directory.

Why is there such a problem? Back in the old days, most websites were still placed on virtual hosts, and the root directory of ftp was directly the root directory of the web. In order to adapt to this situation. Codes like phpbb, vb, discuz, and ofstar can only store library files directly in the same level directory.

But is it still necessary now? Today's server prices are much cheaper than before. Basically, a webmaster is a server, almost a vps. In addition, even a virtual host will not have the same ftp root directory and web root directory. Generally, ftp is one level higher than web. So we no longer need to put all programs in the web directory, but put the files that need to be used on the web in the web directory.