module folder permissions

[certified natural uk]

i am using ws_ftp to edit my files

 

to change the settings of the modules i have the following options

 

owner group world

read read read

write write write

execute execute execute

 

i have modules folder -> order total, payment & shipping folders

 

what settings of above do they have to be set to?

 

at the minute i have

 

all folders -> all ticked except world -> write

[♥Vger]

You can also use numerals, just by typing them into the box below the tick boxes. 755 for folders and sub-folders ('images' may need to be 777), 644 for pages (except includes/configure.php which is best set to 400).

 

Vger

[Guest]

...what settings of above do they have to be set to?...

Firstly, your web server should not own any files that it serves. To do so is a security risk you can easily avoid (so why take that risk ?).

 

So...

 

The file owner (possibly root, possibly some other user you use for admin work) should be set to read only (or read/write/execute if you like - if the file owner is root then I suppose it makes little difference)

 

The file group will probably need setting to the same group as the web server is running as and set to read permissions ONLY (you'll also need execute permission for directories)

 

The world permissions will probably be set to 'none' because nothing else has any business looking at this stuff.

 

Rich.