Looking at the /upload folder there is some personal data there that I would like out of the public area, eg in /home/user/private rather than /home/user/www/gibbon . Is this possible please? Many thanks
Hello, and welcome to the Gibbon community. Security is always something we take seriously, and so the design of Gibbon is that files uploaded to this area have a name with a random string, making them almost impossible to guess: if you combine this with turning folder browsing off in your server set up (which is one of the recommended Post-Install Config items in our Installation Guide), the items should be private.
If we were to place the items in a location away from the browsable root of your the server, then they would no longer be available via the web…at least that is my understanding of how Apache and other web servers work. Correct me if I am wrong!