Sitefinity admin security

I found the following in the Sitefinity Security and Best Practices white paper and have a few questions about it:

First, how would we change the virtual mapping?

Second, it seems that this is suggesting moving the theme folder from out of the /App_Data folder, but every post I have found for Sitefinity 5+ says to put the App_Theme folder at ~/App_Data/Sitefinity/WebsiteTemplates/[TemplateName]/. If it is recommended that these files are not in that folder, why do all of the instructions say to put them there?

Hi,

Regarding your first questions I would suggest you to review this KB article:

There is no problem to register a different path for your themes. In our documentation:

www.sitefinity.com/.../registering-a-theme

we have given a sample with:
/App_Data/Sitefinty/WebsiteTemplates/YourTemplate/App_Themes/YourTheme

App_Data and App_Theme are NET application folders and this is the reason why we recommended placing the theme inside these folders.

You could find useful information regarding these folders in the URL below:
http://www.codeproject.com/Articles/31557/A-Beginner-s-Guide-to-ASP-NET-Application-Folders

However, this path might be different. Please note that once you have register a theme using the path above and you decide to move the theme, you need to go to App_Data -> Sitefinity -> Configurations, open AppearanceConfig.config file and change the path of the theme. (The other option that you have is to change it from the backend of Sitefinity Administration -> Settings -> Advanced -> Appearance -> Frontend themes).

Regards,
Stefani Tacheva
Telerik