function file_unsafe_directories

Return a list of directories that are not allowed to be upload destinations.

This list is not comprehensive. It is utilized to prevent accidental administrative misconfiguration.

Return value

string[]:

Related topics

File

core/includes/file.inc, line 2139

API for handling file uploads and server file management.

Code

function file_unsafe_directories() {
  $unsafe_directories = array(
    // The installation root directory.
    '.',
    // Wildcards prevent any children directories. Wildcards are only supported
    // at the end of a directory path.
    'core/*',
    'layouts/*',
    'modules/*',
    'themes/*',
  );

  // Allow the list to be overridden in settings.php:
  return settings_get('file_unsafe_directories', $unsafe_directories);

}