Prev Next

Print

We strongly recommend that the data folder is moved to a non-public area.

• Note: If you do not move the data folder, anonymous visitors will be able to download any of the files contained in this directory by typing a direct URL to the file. Many of the files in the data folder contain valuable information that should not be available to unauthorized access.

To protect this information, move the data folder to a non-public area of the disk. Remember to set read/write access for the ASPNET,IUSR_<MachineName>, or Network Service user on the data folder (see the Data, Upload, and Layout Folders Settings section below).

Once the folder has been moved, you will need to configure Sitecore to fetch data from the new location by modifying the DataFolder setting in the web.config file (located in the root directory of your site). For example:

<sc.variable name="dataFolder" value="/data" />

Prev

Next