index.php in the root folder?

@iRedds
Thanks for the explanation.

It makes sense. I was thinking that .htaccess files already blocks the access. But since browsers can't access upper level of public_html, it is obviously far more secure. It wasn't clear before but now I understand the concept I think.

Well, in this case, my silly attempt still seems ok if you are willing to compromise security down to CI 3 level. Yet, since the goal is being up to date, it is better to follow the correct path. And yes, if a hosting doesn't allow me to access upper level of public_html, better to stay away. If i can access to the upper level, then there is no problem to setup CI4