[Solved]: CHMOD values for a secure install? [Solved]: CHMOD values for a secure install?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

[Solved]: CHMOD values for a secure install?

Started by peakoverload, June 02, 2004, 11:40:22 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

peakoverload

I've searched everywhere but couldnt find anything so perhaps its not an issue.

I know that the CHMOD values for the Includes and Albums folders should be set to 777 but what about all the other files and folders what should they be set to for maximum security or doesnt it matter?

Joachim Müller

all other files need to be read and executed by the visitors and the user the webserver runs under, so CHMOD to 555 if you want. Usually you don't have to, as this is generally already the case on most servers.
The people browsing your site don't need direct access to the includes and themes folders, so you could even remove the access rights for them (only the webserver needs access there), so if you're paranoid you could even remove access rights there partially.

GauGau

peakoverload

Thats great, thanks for that much appreciated.