[TYPO3-50-general] directory layout

Martin Ficzel martin.ficzel at gmx.de
Fri Nov 10 10:16:29 CET 2006


Martin Kutschker schrieb:

> The benefit is a layout that has a builtin access protection that does
> not need complicatin access restrictions in the web server.

that is solving only a part of the current problem. direct acess to some
resources can always be a problem. for instance images wich are part of
a login section can be acessed directly from others by using the
uploads/pics folder and guessing the url's.

i think a mechanism to avoid this problem will also fix your points.

if i got the idea of the cr right it will also be used to store resource
data (wich can be internally stored in the filesystem). so i think all
resources-data should be managed by the cr and the filesysten of the
webserver should contain only core/ext code.

regards Martin





More information about the TYPO3-project-5_0-general mailing list