niutech / node.php

Run node.js apps from PHP even on a shared hosting!
817 stars 235 forks source link

Moving Node install away from public_html #15

Open Sustenance opened 8 years ago

Sustenance commented 8 years ago

This is a bit of a design discussion, but I feel that the location for the node install should be above the public_html/html folder that node.php resides in, that way it is not as easy to discover on the Internet. Obviously, this MAY not be possible on all shared hosting services, but on the couple I've used it would be. I suggest move the default install location to ../ and just use public_html/node as a fall-back.

niutech commented 8 years ago

What is the security issue with having node in public_html? It is easier to put all files there since some hosting providers disallow going one level up.

Sustenance commented 8 years ago

It's definitely easier to be in public_html, but then web crawlers may be able to access it. You don't want your server files to be public.