Securing VB's avatar/images/signatures/attachments.

[Deimos]

Just out of curiousity, is it worth moving any of those directories outside of the public_html folder?

[Wayne Luke]

You cannot move the avatar, images or signaturepics directories outside the public_html folder because their contents can be served by the http server and need to accessible from the web.

You can move the attachments folder above the webroot and we recommend that you do so.

[Deimos]

Thanks for the info Wayne :)