templates_c directory
 

The cache for templates in templates_c directory can be viewed by anybody, I already protected at root level with .htaccess from prying eyes so that the tpls cant be seen, but is there any other method in order to avoid anybody from getting into that directory completely ?

just do a .htaccess on templates_c also then...
should work i think... havn't tried it myself yet :)

Not sure about that, since it is managed by the Smarty template engine and could cause problems.

just put a blank index.html page in there

Actually I was going to put an index.php with redirect to root, but I didnt try it cause I thought it would damage the smarty output somehow.

But your the expert, if you say it will work, thats ok for me. :wink:

Shan, would this protect downloadables from unauthorised access too if a blank index.html file were placed in the downloadables' folder.

S. :?:

na you would need to use an .htaccess file for that

Thanks, will look into that.

S. :)

I have a question here regarding this. If I put an index page in that folder, what happens when I clear the templates from admin ? Will it be erased as well or does xcart only erase tpl files in that folder ?

Good question ...

I've done a bit of reading now about .htaccess files.

Am I right in thinking they're no use with IIS?

S. :?

Yep, as far as I know .htaccess was created out of Unix boxes to control directory layout and access, and therefore has no use in Windows whatsoever. For windows you have to use the same commands you use in your own computer to control this, like if you are the admin on a Windows 2000 Server, you control access with your control panel.

I like windows as the number one desktop OS, but I dont trust it as an Online server for several reasons... its expensive, a lot of hassle, security breaches and holes, etc. Just my opionion.