[sduckie2k5]

Originally Posted by AndrewD

Several points.

You can place all the LDM files outside the web server directories using the local_file_root and local_file_root_prefix settings. That will completely stop anyone being able to get at the files by guessing the location. This is explained in http://www.eirma.org/wikis/index.php...nd_Server_Load

In addition, you should block your web server from allowing production of directory listings when someone just enters the directory name. An easy way to do this is to put an empty index.html file in that directory. A better way is to tell the server not to provide directory listings. With Apache, you can also configure the server to prevent directory listings, using the Options commands within the httpd.conf file.

Thank you I will use those ideas! D*