Which Files/Folders need to be Writable??

[louie55]

I am very sorry if this has been asked before.

I am running Coppermine 1.4.4 on a website and yesterday, it crashed all by itself. I made absolutely no changes to the config or files and all of a sudden it just crashed giving an "Unexpected T_STRING" error for init.inc.php. This seemed to come out of the blue. So, I thought that somehow a user might have done something to crash this file (don't know if that's possible), so I decided to copy a new copy of the file over using Filezilla and refresh the page. After doing this, the error for init.inc.php went away, but the same error came up for functions.inc.php. So, I copied a new version of that file over and refreshed the gallery. Then, it was just a blank white page. Nothing else. I had not changed anything for a couple days and nobody else has access to the files, so I don't know what happened?? So, I decided to just copy an entirely new copy of ALL files over except config.inc.php and the albums directory as to keep my current settings/pics. After that, the gallery is back up. So, this leads me to believe that the gallery was possibly hacked?? Or changed unpurposely??

Anyway, to get to the subject of this topic, a lot of the coppermine files on my coppermine installation (including the ones I listed above) have full read/write permissions. I would like to lock this installation down so that only the NECESSARY files have write permission. Would it be possible to get a list of which files and folders need write permission so that I can lock down all the rest?? I would appreciate any help.

Thanks.

Louie

[louie55]

Per the documentation, I have made the albums directory writable and also include/config.inc.php. I have taken write permissions off of everything else. Is this correct??

Thanks.

Louie

[donnoman]

Only the folder albums and its subfolders need to be world writable after installation.

If you haven't installed and configured Coppermine then you need to make the includes folder writable. But only until the gallery is operational so that your config file can be written by the install routine.

after your config.inc.php has been written, then it does not need to be writable.  Edit it manually if you need to, Nothing in coppermine allows you to re-write the data in it after install.

Your problem actually is more reminiscent of an FTP client that isn't setting the mode (ascii vs binary) correctly.

OR

You are uploading modified files.

OR

Your FTP client is being too smart for itself and not sending ALL the files again because it thinks they are not newer. Force your FTP client to send every file again.