Move "/uploads" folder outside "/public_html" folder

Hi Greg,

You can move the uploads folder out of the cmsb folder by changing the Upload Directory and Upload Folder URL under Admin > General Settings. Then copy all the upload folder contents to the new location.

This works for uploads using an upload field. If you have uploads that have been uploaded in a WYSIWYG editor, the URL path is saved in the record contents and would have to be updated individually or by a search and replace via mySQL.

For moving the uploads folder outside of your /public_html folder, I'm not sure how this would work. There wouldn't be a Upload Folder URL that you could enter in the CMS Builder settings that would work and you wouldn't be able to display images or links to files that are outside the /public_html folder.

Could you limit the file types that can be uploaded to prevent malicious files?

Hi Damon,

Thanks for the message. I had overlooked the fact that files wouldn't be publicly accessible if they are moved outside the "public_html" folder. I think I will need to just apply other security measures like, as you suggested, restricting the file types that can be uploaded.

Thanks again!

Regards,

Greg