scrap pad

Drupal question

I asked this on the CTC VISTA Project Drupal wiki page.

Can anyone tell me about Drupal's "file access" features? It seems like it just points to files at "drupalinstall/system/files/filename" and controls access there, but the files are still available at "drupalinstall/files/filename" without access controls. Am I missing something? Do I have to put something in the .htaccess file to restrict access to the "files" directory?

Archives

who I am