Thank you very much for your responses.

For the security I've inserted a .htaccess file (with a text "Deny
from all") to a /application folder, so I think no one can access the
files in the application folder from the web right? Isn't that enough
for the security?

http://symfony.tomor.cz/
http://symfony.tomor.cz/application/config/databases.yml


I know I'm really not good in configuring a server, so I very
appreciate your comments.


The true is, that I can ask the guys who is providing the server to
change the configuration if it will be necessarry. But I want to find
if there is a way to secure the application with actual configuration.


On 10 ún, 21:55, Eno <symb...@gmail.com> wrote:
> On Tue, 9 Feb 2010, Tom Ptacnik wrote:
> > Shorter question :-)
>
> > Did someone tryied to change project structure to:
>
> > /www    (web folder - index.php, .htaccess, css, js....)
> > /www/application    (rest of the application - apps,cache,config,....)
>
> > and had some problems with that?
>
> I guess noone answered your earlier post because it was such a long
> detailed post. The main point though is that you can structure a symfony
> application anyway you want and some of us have done so for certain
> situations.
>
> In your specific case it looks like you are putting the symfony tree in a
> subfolder below your publicly accessible web folder. The problem is that
> you will have to somehow secure that tree so that noone can just type say
> /application/config/databases.yml and look at your database config. Say
> you did somehow secure that, I personally still think is a Bad Idea to
> have any application code under a web-accessible folder - any
> misconfiguration of your server could disclose information about your app.
>
> --
> A

-- 
You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to symfony-us...@googlegroups.com.
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en.

Reply via email to