News:

CPG Release 1.6.31
Minor maintenance release
Clean up remaining remnants of the .net CPG website
Improved installer_stub compatibility with various server configurations

Main Menu

Versioncheck warns writable, but FTP can't change permissions?

Started by Eric Chadwick, November 09, 2007, 08:41:51 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Eric Chadwick

Hello.

I upgraded to 1.4.14, and ran Versioncheck.php, and it reports several folders as writable. For example:
=============
Folder writable
The folder "bridge" is writable. This is an unnecessary risk, coppermine only needs read/execute access.
=============

My FTP client, Filezilla 2.2.19a, shows the "bridge" folder permissions as:

drwxr-xr-x

In other words:
Owner permissions: Read/Write/Execute
Group permissions: Read/Execute
Public permissions: Read/Execute

Is Versioncheck showing this as a risk because it has been run by me the owner, and thus it sees the folder as writable?

Since I am the only admin, but Group/Public don't have write access, is there still a risk?

FWIW, my site is hosted, I'm not a server admin.

Thanks for any help.