MuseDock CMS - Document Root Configuration Required

🔒 Security Risk Detected

Your web server's document root is pointing to the project root directory instead of the public/ folder. This exposes sensitive files like .env, configuration files, and source code to the internet.

🚨 What's Exposed Right Now:

.env - Database credentials and API keys
config/ - System configuration files
storage/logs/ - Application logs with sensitive data
vendor/ - Third-party libraries (potential vulnerabilities)
core/ - Application source code

🔧 How to Fix

Apache (.htaccess)

Edit your Apache configuration or virtual host file:

# Apache VirtualHost Configuration
<VirtualHost *:80>
    ServerName yourdomain.com
    DocumentRoot /var/www/html/musedock/public

    <Directory /var/www/html/musedock/public>
        Options -Indexes +FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
</VirtualHost>
                

Then restart Apache: sudo systemctl restart apache2

Nginx

Edit your Nginx server block configuration:

# Nginx Server Block
server {
    listen 80;
    server_name yourdomain.com;
    root /var/www/html/musedock/public;

    index index.php index.html;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php/php8.0-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
    }
}
                

Then restart Nginx: sudo systemctl restart nginx

cPanel / Shared Hosting

In your hosting control panel:

Go to "Addon Domains" or "Domains"
Set document root to: public_html/musedock/public
Or create a subdomain pointing to the public folder
Alternatively, move all files from public/ to public_html/ and move core/, config/, etc. one level up

Document Root Configuration Required

🔒 Security Risk Detected

🚨 What's Exposed Right Now:

🔧 How to Fix

📝 Alternative: Move Files (Not Recommended)