Move "/uploads" folder outside "/public_html" folder

3 posts by 2 authors in: Forums > CMS Builder
Last Post: October 19, 2016   (RSS)

By gversion - October 18, 2016

Hello,

I am considering moving the /cmsb/uploads folder outside of my /public_html folder for security reasons. Should any malicious files be uploaded then at least it won't be in the same folder as the rest of my website.

Am I able to do this via the settings area in CMSB or will I run into problems?

Thank you,

Greg

By Damon - October 18, 2016

Hi Greg,

You can move the uploads folder out of the cmsb folder by changing the Upload Directory and Upload Folder URL under Admin > General Settings. Then copy all the upload folder contents to the new location.

This works for uploads using an upload field. If you have uploads that have been uploaded in a WYSIWYG editor, the URL path is saved in the record contents and would have to be updated individually or by a search and replace via mySQL.

For moving the uploads folder outside of your /public_html folder, I'm not sure how this would work. There wouldn't be a Upload Folder URL that you could enter in the CMS Builder settings that would work and you wouldn't be able to display images or links to files that are outside the /public_html folder.

Could you limit the file types that can be uploaded to prevent malicious files?

Cheers,
Damon Edis - interactivetools.com

Hire me! Save time by getting our experts to help with your project.
http://www.interactivetools.com/consulting/