Geeklog Forums

Results of the Security Check

Good! You seem to have removed the install directory already.
Your db-config.php is reachable from the web.
This is a security risk and should be fixed!
Your logs directory is reachable from the web.
This is a security risk and should be fixed!
Your plugins directory is reachable from the web.
This is a security risk and should be fixed!
Your system directory is reachable from the web.
This is a security risk and should be fixed!
Your backups directory is reachable from the web.
This is a security risk and should be fixed!
Your data directory is reachable from the web.
This is a security risk and should be fixed!
Good! You seem to have changed the default account password already.
Please fix the above issues before using your site!

I have removed the install directory but am unsure exactly 'how' to make these directories unreachable from the web. I have made db-config.php and siteconfig.php unwritable. Any help would be greatly appreciated as I have searched for a while now to 'no avail'. I looked at the Wiki and in the Installation part of the forums under security.
Thanks in advance

The idea is that everything that is outside of the public_html directory should not be reachable from the web. Think of public_html as your webroot directory. Everything else should be outside of the webroot.

If you can't have files outside of the webroot, please see Installing Geeklog entirely within the web root

bye, Dirk