[eluser]thurting[/eluser]
For production I usually move both the system and application folders above the web root. This is really the best choice security wise. I also remove the application folder from the system folder so I can easily update CI without affecting the app. The only files I keep public are the bootstrap and js/css/img/etc. My dir structure is roughly:
Code:
- CI
- system
- application
- www
- index.php
- other public assets
The only variables that need to be changed are $system_folder and $application_folder in the bootstrap. Using the structure above, something like $system_folder="../CI/system" works. Very easy to do. Keeps private files private and makes for easy updates to the framework. It also makes running multiple apps off of the same CI install easy. Just pop in another application folder and make sure you properly name everything and edit the bootstraps and config files where necessary ($config['base_url']).