# Securing /WEB-INF/ by moving it outside of the web root

### Securing /WEB-INF/ by moving it outside of the web root ###

By default, Lucee places its web-context configuration and data files in a folder named WEB-INF within the web root of each website.
The WEB-INF folder structure gets created automatically when Lucee gets called to serve up a .cfm/.cfml file.
If you wish to redirect the web-context data elsewhere, follow the instructions below.

If you followed the instructions on previous pages, you already have a folder called D:\Lucee\.

Create a subfolder called "web-contexts" within D:\Lucee\

* Launch your favorite text editor **as a local Administrator** and open `D:\Tomcat\conf\web.xml`
* Locate the section near the end of the configuration which reads `<servlet-name>CFMLServlet</servlet-name>`
* Locate the `<init-param>` section which contains `<param-name>lucee-web-directory</param-name>`
* Replace the `<param-value>` with `D:\Lucee\web-contexts\{web-context-label}`
* Restart the Tomcat service

# Categories

[Lucee Server related Tags, Functions and Guides](../../categories/server.md)

# See Also

[Deploying Lucee](../deploying-lucee-server-apps.md)