Question about attachments

[TGK]

hi i have a question. i move my attachments folder to non-public directory that folder now is secure? i mean people or my site visitors  cannot access on this folder ?

[WHMCS ChrisD]

Hi @TGK

Our recommendation as per https://docs.whmcs.com/Further_Security_Steps We recommend moving all writeable directories to a non-public location above your web root to prevent web-based access.

Once you move it to a private folder ensure you add the following line to your configuration.php file

$attachments_dir = "/home/username/attachments/";

In the above example, "username" is the cPanel username and so the 3 folders are located in the home directory, above public_html.

[TGK]

hi @WHMCS ChrisD

Hello Chris. I did what you recommend me, but I wonder if the directory attachment is now secure from all public access.