What are the security implications of...

Mark -- on Feb. 9 2005

having to CHMOD everything 777? At least that's what I had to do on a new installation.

Can I more easily get hacked or my site defaced or content messed with?

In real life what can someone do who isn't authorized?

Thanks.

Bernard

from nearby-an-airport
Associate, 6745 posts

on Feb. 12 2005

Mark: Actually, what is really needed is to allow the account that runs YACS to create, modify, or change files. As YACS is able to update PHP scripts, this applies to the software as well.

Most often, this constraint requires to chmod everything to at least 755, because the account used to upload files, through FTP, and the account used to run Apache, PHP and YACS, are different.

1 comment

Rate this page
Posted by Mark on Feb. 9 2005, commented by Bernard on Feb. 9 2005, (popular)