Hello, out of curiosity I Googled ‘bmz_cache‘. The results returned were 100's of links to the bmz_cache folder for websites that have zen cart and IH2 installed. I do not know if this is a security risk or not? I thought it best to post and inform the powers that be about this in case they did not know.

Now, I have tried this on zen cart sites listed in this forum. While this does not work on all the sites I have tried here, I have found that about 70% of sites allow access to the /bmz_cache folder directly. Of those, about 10% allow access to the web space directory tree by using the 'parent directory' link.

Please advice.
Michael