Hello,

I'm going to host an app on a shared host and there I couldn't create virtual host or change something at apache.

Often apps with ZF looks like that:

• root
• • public
• • • index.php
• • • .htaccess
• • application
• • library

I have sth. like that:

• root
• • application
• index.php
• .htaccess

All my code is in the application folder. But there are also some .ini and .xml files with sensitive information e.g. login names and passwords and so on...

If I add a .htaccess in the application folder with deny from all is the information secure inside the folder?