Re: A patch to keep cache directory out of webroot

Jason Judge wrote:
> "mikespub" <[email protected]> wrote in message
> news:[email protected]...
> 
>>...
>>Also, as MrB mentioned, although most sub-directories under var/ are not
>>supposed to be accessible via web, there are a few cases that do assume
>>(possible) access, e.g. :
>>- var/processes/*/graph/ for workflow process graphs,
>>- var/uploads/ for uploaded files when the uploads module is not used,
>>- var/calendar/*.ics depending on the evolution of the calendar module
>>...
> 
> 
> Do we need some 'variable' area that is accessible from the web then? It
> makes more sense than putting data like that into the modules (the modules
> may be accessible from the web - for images and stylesheets - but they
> almost certainly should be read-only to the web process.


There seems to be a need for both an area in the webroot and one that 
isnt. e.g. imho the config files should not be in the webroot.

Maybe some kind of definition of what the areas are and what 
information/files should go where?

miko