Jump to content



Latest News: (loading..)

- - - - -

Set right user permissions


This topic has been archived. This means that you cannot reply to this topic.
4 replies to this topic

#1   Tom_Hennigan

Tom_Hennigan
  • Members
  • 3 posts

Posted 23 March 2012 - 01:54 PM

Help, I f-uped, Someone can get to my configure, how do I reset user permissions?  

There is now an alert above the site.  I need to fix asap.  Attached File  Config.PNG   10.58K   7 downloads

#2   Biancoblu

Biancoblu

    1291 Giger's Alien

  • Community Sponsor
  • 706 posts

Posted 23 March 2012 - 06:42 PM

configure.php should be set to 444 or 400, depending on server set up.
~ Don't mistake my kindness for weakness ~

#3   ShopAdminNL

ShopAdminNL
  • Members
  • 15 posts

Posted 19 April 2012 - 01:28 PM

This goes for both configure.php files? I have one in my shop dir and one in my admin dir, both are set to 644 now.

And also, I've read that .htpasswd should be set to 444, but when I do my admin panel gives an error, so they are now set to 664. Is this okay, and/or what to do with this?

#4   DunWeb

DunWeb

    The Censored One

  • Members
  • 12,732 posts

Posted 19 April 2012 - 03:13 PM

@ShopAdminNL

Directories should be 705 (755 if you have to)

Files should be 604 (644 if you ahve to)

TWO configure.php files should be 444



Chris
:|: Was this post helpful ? Click the LIKE THIS button :|:

See my Profile (click here)

#5   MrPhil

MrPhil
  • Members
  • 4,144 posts

Posted 19 April 2012 - 05:31 PM

The idea with the two configure.php files (or three, if you have a "local" one) is to secure them against writing by PHP code (such as osC), to minimize the chances of a hacked osC overwriting them. Depending on how your server is configured (whether PHP runs as owner or in group/world), 644 may sometimes be sufficient, but 444 is almost always sufficient. Just remember to temporarily restore to 644 if you want to edit or to upload a new copy.

N.B.: '6' = Read-write and '4' = Read-only for 'ugo' = user/owner group other/world users (Linux style)