Ospari: PHP based Blogging software that can use Ghost themes

Re:Ospari: PHP based Blogging software that can use Ghost th... by citricsquid on Sunday February 09, 2014 @03:51PM (#7207166)

If you absolutely cannot separate out the public portion of the application from the core -- which should be possible because even the worst shared hosts allow for folders above public_html -- then you'll need to use a PHP solution for protection the files. For example if you define a constant in index.php and then check for that constant in included files you can prevent access, eg:

    defined('BASEPATH') OR exit('No direct script access allowed');

From https://github.com/EllisLab/CodeIgniter/blob/develop/applica...

[ Parent | on HN ]

Re:Ospari: PHP based Blogging software that can use Ghost th... by techvibe2 on Sunday February 09, 2014 @04:29PM (#7207350)

You are right again. But I will complicate the installation. The PHP files are secure, they are classes ore arrays. if you execute them nothing happens. We have an .htaccess file in core applications folder. The .htacces file rejects all requests.

We would provide security tips also for nginx users. Just to repeat all files except index.php are classes ore arrays and and they don't execute any code.

[ Parent | on HN ]