1 jibberjab Mar 04, 2013 17:26
3 jibberjab Mar 06, 2013 03:51
Thanks for the clarification, it helped get me in the right direction.
I've got apache running with virtual hosts under /home/myuser/public_html/ folder. Apache and php are running as the default www-data, and 'myuser' has been added to the www-data group.
I installed mod_suPHP and switched all the folders back to myuser:myuser. It seems to be working properly so far (the images load, I can switch skins, etc). I haven't tested it extensively yet to see if everything works, but is there any reason why this approach shouldn't be used?
jj.
4 fplanque Mar 06, 2013 04:14
5 fplanque Mar 06, 2013 04:17
Ah and I just saw your answered in between.
I am personally not using mod_suPHP because I use dedicated servers and I believe it adds no security if you are the only user of teh server. But it adds additional processing :p
You can fix your issue without mod_suPHP as explained here: http://b2evolution.net/man/advanced-topics/security/optimal-file-permissions
6 jibberjab Mar 07, 2013 06:01
Thank you, I'll check it out in the morning. The less modules / processing cycles the better of course. I'll undo the mods I made and test it out based on the page you linked.
jj.
7 jibberjab Mar 09, 2013 03:19
Well I followed the guidelines on the page you linked and so far everything is running smoothly. I should have some time this weekend to do some skin development for starters, and that should help find any issues that may remain. Thanks again!
jj.
It is a straight permissions issue. You should check the owner and the group of your /media/* and /cache/* directories. One of them (preferably the group) should match the user PHP (and therefore b2evolution) is running on.
Otherwise it's no use to set permissions because you don"t set them for the unix user that needs them ;)