Is it best practice to restrict direct access to view files?

[eluser]rei[/eluser]
Is it best practice to restrict direct access to view files? Or I just need to restrict direct access to my controllers and models? Please give me suggestions.thanks

[eluser]Aken[/eluser]
If your views are in the application folder, they are already restricted.

[eluser]Daniel Moore[/eluser]
Yes, it is best practice (just to confirm that part.) But as Aken said, if the views are in the application folder, they are already restricted.

I generally set up my application to where everything except index.php and my assets folder (images and css) are outside of the web root in order to make securing it all a bit easier.

[eluser]CroNiX[/eluser]
[quote author="Aken" date="1344404932"]If your views are in the application folder, they are already restricted.[/quote]Assuming you are on an Apache server.

[eluser]carllawl[/eluser]
Yeah they should already be restricted by default! :gulp:

[eluser]rei[/eluser]
Thank you very much for all ur help guys! So it means I dont need to restrict it manually because it is safe when it is in the applications folder