Securing the Downloads Folder

[ScriptJunkie]

I read and followed the instructions in the How do I relocate my "download" folder outside my webroot for better security? tutorial.

1. I set my download method to redirect
2. I moved my download folder to one level above the public html directory.
3. I made the required changes in both configuration files as follows:

changed:

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

to:

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . '/home/xxxxx/download/');

When I went to my storefront, this error message was running across the top of the screen:

Warning: The downloadable products directory does not exist: /home/xxxxx/public_html/MY_STORE//home/xxxx/download/. Downloadable products will not work until this directory is valid.

Why would it be looking in the old and new directory paths as if they were one path?

To get rid of the error, I had to put everything back to how it was.

I then repeated the process, only this time I deleted the config files and reuploaded instead of overwriting. I also made sure that I pasted the entire string for the new directory path over the old, rather than typing by hand.

Suggestions?

[ScriptJunkie]

Can someone please assist me in diagnosing this error?

[DrByte]

You left DIR_FS_CATALOG in the define, instead of replacing it with your new path.

[ScriptJunkie]

Oops

Thanks for the tip doc!