1
I notice that non-PHP contents under the XOOPS root directory are not protected in any way, at least not in my configuration (perhaps I have done something wrong). For instance, I were to create a module which had some non-PHP files in it, say text files, which were used by the module, those would be readable by everybody, even if I restrict the module to registered users. The same is true for /uploads/. Sure, I can make directories non-listable, but that doesn't restrict access to the files per se. Is there anyway of doing this, or is this just the way things are?
Regards,
Linus
