I am trying to locate ONLY the files directory outside of the drupal directory.
It is my understanding that it is more secure to store ones files 'outside' of public_html so this is what I am attempting to do.
EXAMPLE: Files in home/~user/files versus home/~user/public_html/sites/www.example.com/files or home/~user/public_html/DrupalFolder/sites/www.example.com/files
Can this be done? I am somewhat of an experienced user of drupal and have my own web host manager as well as my own cpanel for my domain account. I can use SSH, not real well, though, I can create symbolic links etc.
At the moment I am developing a couple of websites off of one drupal 6.8 code base and have had little difficulty operating the sites with exception of having my uploaded files that are stored outside of my drupal directory DISPLAYED...sigh! Sorry for screaming.
Anyone have any ideas of how I may accomplish this.
Comments
Files stored outside the web
Files stored outside the web root don't have an URL, so they can't be accessed directly from the web.
If you use a symlink from inside the web root to access them, then they obtain an URL and become accessible from the web, which makes the whole thing meaningless.
By using Drupal's "private downloads" method in admin/settings/file-system, drupal can access the files internally and *conditionally* supply them with a virtual URL of the form system/files/file-name, depending on drupal permissions. Of course that has a processing cost.
When using "private downloads", you can set the file path to /home/~user/files, or /home/~user/files/site-alias if you have many sites. These paths won't be accessible from the web, but the virtual path system/files will be.
Excellent Response, Thank you, Trouble is the setting is gone?
Thank you for your clear and effective explanation on the files outside of drupal directory folder.
Here is where I went to find out exactly how to change the setting for 'download method' http://drupal.org/node/22240
My problem now, lol, is that the check boxes are gone from the admin/settings/file-system page....sigh!
So, now I have two choices
I have done much research on the many file modules looking for a decent combination of security as well as ease of use, though I admit, I am a user not a developer of any kind.
My site has ended up with many modules that influence file uploads, being that it is a development site with no user data, you would be welcome to look around 'as an admin' though not as user 1, if you like.
** The above report 'confirms' that the setting is 'public'.
In researching the file upload and downloads dream I have ended up with many modules related to files in my site.
The above information is for information purposes only, I expect nothing in response, though, I appreciate any efforts to assist me in resolving this.
After, I figure out what has gone on, I will report this as an issue in the applicable 'issue' que for whichever module has removed the settings from display.
Missing 'download method' settings in admin/settings/file-system
I went through quite the adventure trying to change my 'download method' to private from public, the settings disappeared from my admin/setttings/file-system page.
After 'disabling' ALL of my file related modules and clearing my cache, my settings for download method returned. Upon enabling each of my modules one at a time, I find that the Bitcache 6.x-1.0-alpha2 removed the radio check boxes from my admin/settings/file-system page.
Hope this helps some other lost soul that has found their settings have been removed.
**The shortcut to simply change the download method to private is to change the variable for file_download the 1 setting is for public, and the 0 setting is for the private download method.
Don Moody