NOTE: Since TWIG uses IMAP it also can be used to create additional mail folders to sort and store incoming mail. Any additional mail folders that a user creates will be created in the user's home directory as listed in your local password file (~/etc/passwd). If the user's home directory happens to be defined as a directory in the ~/www/htdocs/ or ~/www/vhosts directory structure (typically created in this fashion such that the user can upload and download content to and from a Virtual Subhost via FTP) then any mail folders these users create using TWIG will be accessible to anyone via a web client.

Therefore, it is highly recommended that these users create any additional mail folders under a Mail subdirectory and create a .htaccess file and store it in such a Mail directory to protect the confidentiality of the mail stored therein. The contents of a suitable .htaccess file are shown below:

<Limit GET POST PUT DELETE>
deny from all
</Limit>