I have a php site with a web root directory `/var/www/html/limesurvey/`. Let's say this maps to the URL `https://mylimesurveysite.com/`.

The default runtimePath where logs are saved is `/var/www/html/limesurvey/tmp/runtime/`. If I wanted to download a log file, I could visit the URL `https://mylimesurveysite.com/tmp/runtime/application.log` and my browser would automatically download the log file. I've tested this.

If I set the runtimePath to `/var/limesurvey_runtime/`, are my log files in this directory still accessible to the internet somehow?

I tried to visit `https://mylimesurveysite.com/../../../limesurvey_runtime/application.log` and it doesn't seem like the log file can be accessed this way. So it seems URLs aren't evaluated like programming language paths.