Separate Client Portal from main app

What would be my best option ( security based also ) ?

with the disclaimer that i understand some people would consider this too much but...
separate application folders that are one level above the server root
separate admin html folder for logging in

PHP Code:

admin_application/public_html/admin/index.php 


otherwise the default for *any* possible routes is the public client side, which points to the client application folder

PHP Code:

client_application/public_html/index.php 


that way your public client routes are always kept completely separate from admin. otherwise you run the risk of exposing controllers and methods on the public server that should only be for admins. another advantage is that every controller in the admin application requires the user to be logged in. so you aren't constantly having to check - is this an admin or a client?

both can point to the same system folder

PHP Code:

system302/public_html/ 


one advantage of this is you can build and 'break' things in the admin application folder
and then push them to the client application when they are ready for production