Effect of exposing your system folder

[eluser]Daniel Moore[/eluser]
If you must have your system folder within the web root because of limitations of the hosting provider (it happens) then put an .htaccess file in the system folder with the following content:

Code:

deny from all

This will prevent anyone from gaining "accidental" access to the files unless they have ftp access.

It is always best, however, to place it outside the web root whenever possible.