Securing Zencart

[kitcorsa]

i need to know this also

[EyefulTower]

i need to know this also

https://www.zen-cart.com/tutorials/i...hp?article=280

[Chuckl]

The security guidelines suggest that the best way to secure Zencart is to store certain folders below the webroot.

What security guidelines are these?
All of the Zen Cart folders are below the webroot by default. There is a recommendation that if you are selling downloadable products you should move the downloads folder and downloads outside the webroot, so they are not directly accessible from the website.

[gjh42]

By "below the webroot" they mean outside /public_html/ in the directory path... it's just a semantic ambiguity. Trees don't have branches and leaves "below" the roots, they are "above" the roots. Anything "below" the roots is hidden underground.