folder arrangement for live sites

Yii 2.0 General Discussions
1

I just wanted to confirm the folder arrangement for a live site.

Am I right in thinking that my "Web" folder should be in my document root but all other folders (eg - controllers etc) and files (eg - composer.json etc) should be outside the web root?

2

You need to configure your server to use the your_site/web directory as web root, yes.

3

Thanks Jacmoe

I have all my site contents inside my server root.

I have added a .htaccess file to the root




RewriteEngine On

RewriteRule ^$ /web [L]

Options -Indexes

This redirects call to the route folder address to my actual web root, I’ve disabled listing of all the other folders.

What else should I do here to secure the location, people could still directly access files through the browser using the full path?

4

Do you have the option of setting the web root of your site on your host?

If you have, then set it to the web directory there.

Or, if you have full control and use virtual hosts:


<VirtualHost *:80>

	DocumentRoot "/home/yourname/yoursite/web/"

	ServerName yoursite.com

	<Directory "/home/yourname/yoursite/web/">

    	AllowOverride All

    	Require all granted

	</Directory>

</VirtualHost>

I believe that is written in the guide, under installing Yii ?

5

If you, for some reason, can’t set the root to ‘web’, then it is probably better to use this template:

It has already been secured properly (AFAIK) without having to use the subdirectory ‘web’ as root, so a good starting point.