summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDerek Jones <derek.jones@ellislab.com>2010-03-25 16:28:46 +0100
committerDerek Jones <derek.jones@ellislab.com>2010-03-25 16:28:46 +0100
commit3181ae2a93b2c46112040036267d7c1767fe5109 (patch)
treed94762228662b76a0375dfd7fc0a68795407a2a6
parent6e50b856d30037a88d878a68d1055fd37a182008 (diff)
updated docs to encourage installation of application and system folders above web root
-rw-r--r--user_guide/changelog.html1
-rw-r--r--user_guide/installation/index.html11
2 files changed, 9 insertions, 3 deletions
diff --git a/user_guide/changelog.html b/user_guide/changelog.html
index 7a6ef0620..3f569abe2 100644
--- a/user_guide/changelog.html
+++ b/user_guide/changelog.html
@@ -68,6 +68,7 @@ Hg Tag: </p>
<li>Scaffolding, having been deprecated for a number of versions, has been removed.</li>
<li>Plugins have been removed, in favor of Helpers. The CAPTCHA plugin has been converted to a Helper and <a href="./helpers/captcha_helper.html">documented</a>. The JavaScript calendar plugin was removed due to the ready availability of great JavaScript calendars, particularly with jQuery.</li>
<li>Added new special Library type: <a href="./general/drivers.html">Drivers</a>.</li>
+ <li>Moved the application folder outside of the system folder.</li>
<li>Added routing overrides to the main index.php file, enabling the normal routing to be overridden on a per "index" file basis.</li>
<li>Added the ability to set config values (or override config values) directly from data set in the main index.php file. This allows a single application to be used with multiple front controllers, each having its own config values.</li>
<li>Added <kbd>$config['directory_trigger']</kbd> to the config file so that a controller sub-directory can be specified when running _GET strings instead of URI segments.</li>
diff --git a/user_guide/installation/index.html b/user_guide/installation/index.html
index 08f37ac9e..a64461314 100644
--- a/user_guide/installation/index.html
+++ b/user_guide/installation/index.html
@@ -66,9 +66,14 @@ Installation Instructions
<li>If you intend to use a database, open the <dfn>application/config/database.php</dfn> file with a text editor and set your database settings.</li>
</ol>
-<p>If you wish to increase security by hiding the location of your CodeIgniter files you can rename the <dfn>system</dfn> folder
-to something more private. If you do rename it, you must open your main <kbd>index.php</kbd> file and set the <samp>$system_folder</samp>
-variable at the top of the page with the new name you've chosen.</p>
+<p>If you wish to increase security by hiding the location of your CodeIgniter files you can rename the <dfn>system</dfn> and <dfn>application</dfn> folders
+to something more private. If you do rename them, you must open your main <kbd>index.php</kbd> file and set the <samp>$system_folder</samp> and <samp>$application_folder</samp>
+variables at the top of the file with the new name you've chosen.</p>
+
+<p>For the best security, both the <dfn>system</dfn> and any <dfn>application</dfn> folders should be placed above web root so that they are not directly accessible via a browser. By default, .htaccess files are included in each folder to help prevent direct access, but it is best to remove them from public access entirely in case the web server configuration changes or doesn't abide by the .htaccess.</p>
+
+<p>After moving them, open your main <kdb>index.php</kbd> file and set the <samp>$system_folder</samp> and <samp>$application_folder</samp> variables, preferably with a full path, e.g. '<dfn>/www/MyUser/system</dfn>'.</p>
+
<p>That's it!</p>