There are three directories that MUST NOT be accessed publicly:

  • /cache/ for cache files
  • /logs/ for log files
  • /StoreCore/ for the code library

Access to these directories is denied in .htaccess, so for example logs are inaccessible through a URL like It is however RECOMMENDED to move these directories out of the web root entirely. If a directory is moved, the path can be set by uncommenting one of the directives in the File System section of the config.iniconfiguration file:

[File System]
;storecore_filesystem.cache = ''
;storecore_filesystem.library_root = ''
;storecore_filesystem.logs = ''

Directory Directive
/cache storecore_filesystem.cache
/logs storecore_filesystem.logs
/StoreCore storecore_filesystem.library_root