Which files are security-critical in Orchard and should not be exposed?

Topics: Core, General
Mar 30, 2012 at 7:30 AM

Hello,

I have a blog based on Orchard and I want to host the code on codeplex. Are there any files from the orchard project (source code downloaded from codeplex) which should only be kept locally by me? For ex. is the sql connection string stored in a config file? Or is it safe to make all files public. And of course, I'm not talking about any files which I would create myself, it's just orchard-speciffic files that I'm worried about.

Thank you

Mar 30, 2012 at 5:52 PM

The connection string is stored in your /App_Data/Sites/Default/Settings.txt

Your DB is also there if you are using SQL CE.

Mar 31, 2012 at 7:08 AM

Thank you, just what I needed to know.