Security Question

[barry123]

The three folders "attachments", "downloads" and "templates_c" need to be writeable by WHMCS and therefore require the permissions 777 (writeable by all). When folders have this permission level it is safer to place the folders outside of the public accessible folder tree on your website. WHMCS allows you to do this. If you do move the folders, then you must tell WHMCS where they have been moved to by adding the following lines to your configuration.php file:

 

$templates_compiledir = "/home/whmcs/templates_c/";

$attachments_dir = "/home/whmcs/attachments/";

$downloads_dir = "/home/whmcs/downloads/";

 

With regard to the above documentation, where exactly should I place these files? Where is outside of the publicly accessible folder tree?

[WHMCS John]

Outside of the publicly accessible folder tree usually means the level above your /public_html folder.

[barry123]

Outside of the publicly accessible folder tree usually means the level above your /public_html folder.

 

I don't have a /public_html folder, mine looks somthing like:

 

webspace

> certs

>cgi-bin

>conf

>error_docs

>httpdocs - holds all my sites files

>httpsdocs

>and a few more folders

 

So would it be outside the httpdocs folder? And where should I place them?

 

Thanks