Hi,

Tuesday, October 11, 2005, 3:37:13 PM, you wrote:
BF> I'm finishing up my WASP framework 1.0 release (http:// 
BF> wasp.sourceforge.net) and I'm trying to decide the best way to lay
BF> out the template directories.

BF> WASP uses HTML_Template_Flexy for its template system.  The templates
BF> are compiled using "Chunk" classes that each refer to a html template.

BF> The way it works now, the directory structure of applications is
BF> |_ /webroot/module/templates

BF> where module is where the php classes are stored, and templates is
BF> where the html templates are stored.  The templates used to be stored
BF> in a seperate directory outside of the web root, as such
BF> |_ /templates/
BF> |_ /webroot/ModuleDir

BF> however it becomes cumbersome to keep track of which templates go to
BF> which php classes, so for organization sake having the template  
BF> directory located beneath each module directory is easier to navigate.

BF> My problem is, anyone who realizes a particular application uses WASP
BF> can go to a url, say http://blah/module, and look at the html files
BF> in the template directory (ex. http://blah/module/templates). Is it
BF> too much of a security issue to justify this useful organization?
BF> Theoretically the addition of an .htaccess file in the templates  
BF> directories could solve the problem, but is that compounding the  
BF> issue even more?  I guess I'm asking for someone to tell me it's ok
BF> to do it this way, but if nobody agrees I can change it back.

BF> Thanks for the input.
BF> -Brian


BF> /**
BF>   * Brian Fioca
BF>   * Chief Scientist / Sr. Technical Consultant
BF>   * PangoMedia - http://pangomedia.com
BF>   * @work 907.868.8092x108
BF>   * @cell 907.440.6347
BF>   */

What about:

|_ /templates/ModuleDir
|_ /webroot/ModuleDir


Or even better if the modules should not be accessed directly

|_ /Modules/ModuleDir
|_ /Modules/ModuleDir/templates/
|_ /webroot/

ModuleDir
-- 
regards,
Tom

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to