In my php days I used to keep a www directory in my project, along with doc, tpl and some others.
One suggestion would be to keep everything for your project in the git repo but not in the www dir. This would also solve your .git problem as you would point your web vhost at www/ In the old days there were .cvs or .svn dirs all through your directory tree but with git there's only the one. You shouldn't need to worry about denying access via .htaccess - just keep the top one out of public sight. - Mike On Wed, Jan 20, 2010 at 4:47 PM, Terj <[email protected]> wrote: > Hello, > > I have a quick question regarding deployment with Capistrano. We have > a PHP app here which I have capified and deployed from github. I > notice that it is placing the .git folders in my www folder as well > when it is checking out the code from the github repository. Are there > any security risks around having my .git folder in my web accessible > folders? I remember this being an issue that someone faced a while > back where someone got access to their source code by accessing > their .svn files which were in their web root. > > Any help and guidance would be much appreciated. > > Cheers, > TJ > > -- > You received this message because you are subscribed to the Google Groups > "Ruby or Rails Oceania" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/rails-oceania?hl=en. > > > >
-- You received this message because you are subscribed to the Google Groups "Ruby or Rails Oceania" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/rails-oceania?hl=en.
