Security issue!

[eluser]Alex007[/eluser]
[quote author="gtech" date="1194968994"]xweros method of checking the BASEPATH works very well if you put it in the first line of your view. As he says Its what they use in the code igniter libraries to stop you surfing to the scripts directly, so its a valid way to do it [/quote]

It's even simpler than that, your SYSTEM folder should not be accessible at all from the web.

Inside the system folder, create a .htaccess file (assuming you're running appache) with this in it:

.htaccess file:

Code:

deny from all