security risk for images directory?

  • idiotprogrammer

    (@idiotprogrammer)


    22 years, 11 months ago

    Hi, I noticed in b2config.php that you say that the images directory should be 766.
    Isn’t that rather lax? Why do Others need to be able to write?
    Perhaps it should say the permissions should be 755. Am I overlooking something?

Viewing 1 replies (of 1 total)
  • Mike Little

    (@mikelittle)

    22 years, 11 months ago

    The permissions should be set so that the user which runs the web server is able to create and write to files in that directory.
    In most third party hosting solutions the web server is run as nobody or httpd or some such user that is neither the owner nor in the same group as the owner, thus the requirement for other to have write permission
    Mike

Viewing 1 replies (of 1 total)

The topic ‘security risk for images directory?’ is closed to new replies.