There should be no redundant programs (security considerations) in the Web directory _php tips

Although there are some judgments and limitations to be added before these programs. But in addition to the library files, there are temporary files, template files and other files that should not have been directly accessed by the Web. Store inaccessible files in a web directory, whether from security or code management.

Why is there such a problem? Back in the past, most of the Web site is still on the virtual host, and the root directory of FTP directly is the Web root directory. In order to adapt to such a situation. Like phpBB, VB, Discuz, Ofstar code can only store the library files directly to the same level of the directory.

But is it still necessary? Now the server price is much cheaper than before, basically a webmaster is a server, almost also VPS, in addition, even if the virtual host will not be the FTP root directory and the Web root directory is the same. Generally FTP is higher than the Web level directory. So there's no need to put all the programs in the Web directory, but instead put the files that need to be on the web in the Web directory.