> On Fri, September 21, 2007 10:03 pm, Robert S wrote: >> Actually, according to http://bugs.gentoo.org/show_bug.cgi?id=180796 >> the data dir should be outside the documentroot for security reasons. >> Hence the choice of /var/local/squirrelmail/data. Maybe I should >> create this directory for attachments. Or maybe all "data" should be >> stored here. > > I recommend that the data directory and attahchments directory be outside > the > public_html directory so they will not be browsable by the public. I > futher > recommend that you create an attachments directory separate from the data > directory. > It's cleaner that way, and also better if you ever need to run cronjobs to > purge the > attachments director. > > As an aside, I find that with SquirrelMail 1.4.9a which I now use, the > attachments > directory ends up with old orphaned files much, much less frequently than > when I > used 1.4.4. > Yes I agree, however the latest version does come with a .htaccess file to deny all user. It's still best to leave these types of things out of doc root just in case :) ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
