PyroCMS 的系统和插件文件夹应驻留在哪里?
我刚刚在开发服务器上完成了 PyroCMS 的全新安装,系统和插件文件夹似乎位于“public_html”内的文档根文件夹上方。
PyroCMS 基于 CodeIgniter,每次我安装 CodeIgniter 时,出于安全目的,它总是让我将系统文件夹放置在文档根目录下。 PyroCMS 安装不应该是这样吗?
I have just completed a fresh install of PyroCMS on a dev server and it appears that the system and addons folder reside above the document root folder within "public_html".
PyroCMS is based off of CodeIgniter and every time I did a CodeIgniter install it always had me place the system folder below the document root for security purposes. Shouldn't this be true with the PyroCMS install?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
模块需要资产,这当然意味着需要 HTTP 访问。我们计划最终改进资产帮助程序,以 GZIP/缩小/组合所有内容,并将其传递给“资产”控制器,这意味着可以缓存图像并调整大小,可以压缩 JavaScript 等。
以这种方式将所有内容放入 PHP 文件意味着最终你将能够拥有公共文件夹之外的所有内容,但现在你需要直接访问,否则你就完全放弃了拥有带有图像、CSS、JavaScript 或图标的主题的机会。
只要不要告诉 Apache 将 PHP 文件作为文本/纯文本提供就可以了。 ;-)
Modules require assets, which of course means HTTP access is required. We plan to eventually improve the Asset helper to GZIP/minify/combine everything and pass it through an "asset" controller, meaning images can be cached and resized, javascript can be squashed, etc.
Putting everything through a PHP file in this way means eventually you'll be able to have everything outside of the public folder, but for now you need direct access or you are entirely screwing with your chances of having a theme with images, css, javascript or icons.
Just don't tell Apache to serve PHP files as text/plain and you'll be absolutely fine. ;-)