> In principle, I agree that the document root should not be filled
> with things that should never be directly accessed via the web
Maybe another way is to prefix all core includes with an $core_path
configuration variable that defaults to "./".
Then those of us who have sufficient privs on their server, can easily move
those directories outside the document root, and update the $core_path?
Would also make it easy to do a shared code install, perhaps :-)
/-- Kind regards,