| # |
Apr 18th 2017, 17:01 |
 theaxiom |
that is by far the easiest method |
| # |
Apr 18th 2017, 17:01 |
theaxiom |
hmic said to clone your code to a folder beside public_html then symlink webroot to public_html |
| # |
Apr 18th 2017, 17:00 |
theaxiom |
even if PHP fails and the PHP code is directly output to the browser, your app code is still protected |
| # |
Apr 18th 2017, 17:00 |
sjundee |
Allright. I don't have it 100% clear for me, but I think I'll figure something out with the inputs you provided :slightly_smiling_face: Thanks @theaxiom and @hmic |
| # |
Apr 18th 2017, 17:00 |
theaxiom |
I've personally never had an issue with .htaccess and have traditionally deployed the entire app to public |
| # |
Apr 18th 2017, 16:57 |
theaxiom |
but it is more complicated than a symlink |
| # |
Apr 18th 2017, 16:57 |
theaxiom |
you would have to rename webroot to public_html and then change some configs in your app |
| # |
Apr 18th 2017, 16:57 |
hmic |
sjundee: theaciom is talking about rsyncing the whole app, not the webroot dir alone |
| # |
Apr 18th 2017, 16:57 |
theaxiom |
@sjundee symlink will be the easiest way |
| # |
Apr 18th 2017, 16:56 |
theaxiom |
I run my app in Docker |
| # |
Apr 18th 2017, 16:56 |
theaxiom |
@sjundee just use a symlink |
| # |
Apr 18th 2017, 16:56 |
sjundee |
I just don't understand how a "copy" with rsync will be able to tell my app where to look for the core files. |
| # |
Apr 18th 2017, 16:55 |
theaxiom |
ok |
| # |
Apr 18th 2017, 16:55 |
hmic |
theaxiom: no security implications. |
| # |
Apr 18th 2017, 16:55 |
theaxiom |
@hmic that makes sense, but not from a security standpoint |
| # |
Apr 18th 2017, 16:54 |
sjundee |
Right. Got some options to work on at least. |
| # |
Apr 18th 2017, 16:54 |
hmic |
as you have an atomic operation switching between versions! |
| # |
Apr 18th 2017, 16:54 |
hmic |
theaxiom: the opposite is true. it's even a best practice to symlink the public folder to your app |
| # |
Apr 18th 2017, 16:54 |
theaxiom |
you're obviously more than welcome to do it either way |
| # |
Apr 18th 2017, 16:54 |
theaxiom |
I wouldn't recommend using a symlink from a public folder to a private folder, that's just my opinion |
| # |
Apr 18th 2017, 16:53 |
theaxiom |
rsync is just a file copy tool which will copy all the files over to your desired location |
| # |
Apr 18th 2017, 16:53 |
theaxiom |
then delete your source directory afterward |
| # |
Apr 18th 2017, 16:53 |
theaxiom |
`rsync -vaz source> <dest` |
| # |
Apr 18th 2017, 16:52 |
theaxiom |
and then rsync it to the folder above public_html |
| # |
Apr 18th 2017, 16:52 |
theaxiom |
then clone it into a new folder above the folder above public_html |
| # |
Apr 18th 2017, 16:52 |
hmic |
theaxiom: i'd clone into a new dir besided public_html and just link public_html to the app/webroot dir. |
| # |
Apr 18th 2017, 16:52 |
theaxiom |
ok |
| # |
Apr 18th 2017, 16:52 |
sjundee |
I'm feel like I don't want to clone it into public_html as everything is in a public folder. Even if .htaccess prevents access |
| # |
Apr 18th 2017, 16:51 |
hmic |
theaxiom: still is the whole app "public" |
| # |
Apr 18th 2017, 16:51 |
theaxiom |
as long as you have AllowOverride |
| # |
Apr 18th 2017, 16:51 |
theaxiom |
if you clone right into public_html, the app by nature will be routed through webroot using .htaccess |
| # |
Apr 18th 2017, 16:50 |
sjundee |
apache |
| # |
Apr 18th 2017, 16:50 |
hmic |
if you clone into public_html it is |
| # |
Apr 18th 2017, 16:50 |
theaxiom |
Are you using Apache or Nginx @sjundee ? |
| # |
Apr 18th 2017, 16:50 |
sjundee |
Okay. rsync is new to me. I'll check that up. I guess I get the basic ideas here now. |
| # |
Apr 18th 2017, 16:50 |
theaxiom |
the rest isn't public |
| # |
Apr 18th 2017, 16:50 |
theaxiom |
after you rsync, you can then delete the source |
| # |
Apr 18th 2017, 16:49 |
hmic |
theaxiom: you miss his point: making webroot public, not the rest! |
| # |
Apr 18th 2017, 16:49 |
theaxiom |
`rsync -vaz` |
| # |
Apr 18th 2017, 16:49 |
theaxiom |
I would use rsync if anything |
| # |
Apr 18th 2017, 16:49 |
theaxiom |
I wouldn't do a symlink |