A simple plugin to restrict access to assets for permitted users only. Access to a given asset is only granted if the user has view-permissions for the given source (this can be set in the user- or group-settings). The asset source folder should be moved out of the web root folder so the files are never accessible without this plugin.

Go to Download

silverstripe/vendor-plugin-helper

1 Favers
9243 Downloads

Assists with linking vendor modules to the public webroot

Go to Download

ilopx/yii2-basic-htaccess

68 Favers
325 Downloads

Set web directory in webroot

Go to Download

arthusantiago/bootstrap-for-cakephp

0 Favers
365 Downloads

Automatically copy Bootstrap and Bootstrap Icons assets to CakePHP webroot directory

Go to Download

wanze/fieldtype-secure-file

8 Favers
67 Downloads

ProcessWire Fieldtype storing files in a customized location, for example outside the web-root.

Go to Download

rossriley/boltcomposer-webroot

0 Favers
23 Downloads

Handles an install of Bolt with public assets and Bolt assets in separate root directories.

Go to Download

robloach/drupal-webroot

0 Favers
18 Downloads

The web root directory for Drupal.

Go to Download

matbcvo/mautic-migrate-webroot

0 Favers
10 Downloads

Go to Download

dmk/typo3-composer-webroot

4 Favers
241 Downloads

The TYPO3 Project webroot

Go to Download

claudiu-cristea/drupal-project

0 Favers
27 Downloads

Allows to keep all Drupal code outside of web root

Go to Download

toweringmedia/module-authorizenet

0 Favers
0 Downloads

Accept.js tokenization (PCI SAQ A-EP) with direct card fields (no iframe) Accept Hosted (PCI SAQ A) supported as an alternative hosted flow Apple Pay: server-side merchant validation, cert management via env.php, domain verification support Google Pay: native sheet UX + automatic gateway ID detection PayPal: processed through Authorize.Net’s wallet integration Saved Cards: Authorize.Net Customer Profiles + opt-in save checkbox + saved card dropdown Webhooks: signed (HMAC-SHA512) endpoint + order history updates + event mapping for refunds/voids/chargebacks Security: encrypted API keys at rest, certs stored outside webroot, SSRF hardening, session transaction validation Modern stack: no Knockout dependencies, REST compatible, modular architecture

Go to Download

Next >>