Apache webroot

[keithwtaylor]

Hi there,

Quick question - how safe can I consider files which are stored one directory level below the DocumentRoot to be? I generally try to keep as much as I can out of webroot assuming that there is simply noway it can ever be accessed, but is that really the case?

Thanks for your help!
Keith

[theRatWonder]

Yes, assuming your apache server is set up correctly, that should really be the case.