I am developing a wordpress style theme switcher for a website. Users can upload a theme and then activate/deactivate it.
When uploading the theme, the files go to views/theme/[theme_name]
The problem I am having is that I cannot directly access the image files and I am getting a permissions error.
For instance, one part of my code generates an image from the uploaded HTML file. This image path is inserted into one of my templates but it does not appear.
I understand that it is a security risk enabling direct access to files in this manner.
My questions are:
1) Is my logic flawed when uploading the them zip file to the views/themes folder?
2) How can I edit the .htaccess file to allow me to accomplish this?
My front end themes will be switched by passing the name of the template into css and image paths for the template.