1 njord Nov 19, 2006 17:14
3 village_idiot Nov 19, 2006 17:24
644 is all you need for any file to be world-readable.'
you went from one extreme : 600 (group/world unreadable) to another: 666 (world-writable)
4 njord Nov 19, 2006 17:51
whoo wrote:
644 is all you need for any file to be world-readable.'
you went from one extreme : 600 (group/world unreadable) to another: 666 (world-writable)
Well, I like to be extreme.. He he he..
But seriously, why does it have to bee readable to the whole world for my setup, whilst others can use 600 permission on it, like recommended?
Thanks!
Will change from 666 to 644!
5 village_idiot Nov 19, 2006 18:20
i dunno but here:
http://blog.fagskole.eu/conf/_basic_config.php
as your blog works, and the file is unreadable via a browser, you "seem" safe.
I never guarantee any security.
6 blueyed Nov 19, 2006 20:37
njord wrote:
But seriously, why does it have to bee readable to the whole world for my setup, whilst others can use 600 permission on it, like recommended?
It depends on how PHP is setup. Most hosts seem to use mod_php in Apache and then the PHP runs as the webserver's user, e.g. www-data.
PHP must be able to read the file and it is "world", if the file is owned by your ftp user.
You might want to try this info script: http://manual.b2evolution.net/Debugging#Permissions
Well, I have changed the permissions for _basic_config.php to 666, and the index.php opens ok. But that is not recommended from b2Evolution... What possible solutions do I have, to work around this?