May 3rd, 2011, 11:22 PM
(May 3rd, 2011, 3:21 PM)alexh Wrote: Thanks, all good ideas!
I just thought of one this morning... what about setting a .htaccess file to only allow access from certain IP addresses. Since everyone accessing it will be at one location that uses static IP addresses, that should work fine, right?!
Alex
Provided the IP address @your office is static (which you say it is), then for sure. That's certainly how I'd approach it, Alex.
As Ben reiterated from my earlier post, moving the uploads directory outside of the public root would be the best solution. If you can't, the above guidelines will work fine.
Ben: Good idea re:index.html/forbidden directory access.