Can i change files dir for security?

Can i change folder name files to filesdbforojs for security?

  • Application Version - e.g., OJS 3.1.2-1
  • Description of issue
    • If i change folder name, i can’t download it. I change filesdbforojs to files, i can download it.
  • Steps you took leading up to the issue
    • I change /var/www/files to /var/www/filesdbforojs
    • edit config.conf.php, /var/www/files to /var/www/filesdbforojs

How i can do it.

thank you

Hi @OhnO395,

That’s known as “security through obscurity” and generally isn’t a good idea (especially if you post the directory name you’re using here). Move the files directory outside /var/www, or protect it from direct access using e.g. a .htaccess file.

Alec Smecher
Public Knowledge Project Team

thank you.