Hi, you can change the upload path from the plugin’s shortcode. You can set it outside /upload folder and you can change permissions to that folder so that it is not accessible by anyone.
Regards
Nickolas
thanks for your reply. i tried to move the uploads out of /wp-content/ believing /wp-admin/ must be automatically protected. in any case, i couldn’t get get the file path outside of /wp-content/. (not sure if its a good idea anyway.)
i realize this is outside of your realm here, but can you give me a clue of what direction to look for changing folder permissions? i need to change server settings somehow i’m guessing. thank you!
You can move the upload folder outside /wp-content like this: uploadpath=”../inbox”
The double-dot (..) will take you one level above /wp-content folder, at the root of your wordpress installation. The above upload path will save files in folder “inbox”, located at the same level as wp-content, wp-admin and wp-includes. Please note that you cannot go above the root.
Changing folder permissions is actually easy if you can connect to your website file structure using an ftp client (like Filezilla). Go to the upload folder and right click on it. By default permissions are 755. If you make it 750, then guests will not have access to the folder.
Nickolas
I noticed that using file manager I was able to set the permissions on the folder as well (under privacy for the folder I turned off read/write/execute access for web users).
Awesome thanks!