Hey folks. Just got word from the Zen Cart development team today and they are highly recommending removing several directories after you install your site! These directories are all in the root of the store. They include: /docs and /extras and OF COURSE /zc_install !!! In the past I had recommended simply just renaming these directories, BUT now due to some hacks that are occurring, it is better recommended to download these to your local computer then DELETE them from the root folder.

Also, if you are like most people and you don’t plan on offering digital downloads then you should ALSO delete: /download, /media and /pub

Full details are here at the zencart forum: November 28th Security Update for Zen Cart