Robust
Well-known member
In nginx I'd just make both directories internal, meaning they can't be accessed by the browser. What exactly is recommended on an Apache installation? Planning to move over, I think Apache is still better supported out there. I'd imagine just denying access to both directories and making them forbidden would be fine?