Squintz Posted February 16, 2006 Posted February 16, 2006 I want to make sure that all my files are properly secured and not being an IT guy I am not sure what the proper setting on each file are. Is there a list or can someone make a general rule of thumb type list of what files should be set to what setting to ensure the files will be as safe as possible. Some files require the write enabled but by who? Is it only required for the user/group/other? What other things should I be aware of when making sure my site is protected. Modules installed: http://www.oscommerce.com/forums/index.php?showtopic=57259 - Options attributes - wysiwyg editor - cats on main page - policies and terms
kgt Posted February 16, 2006 Posted February 16, 2006 "Correct" file permissions aren't so simple and really depend on the individual way your host has set up your web server. Generally speaking, you can use read-only permissions for owner/group/everyone on most files except the obvious ones like images directory, backups directory, etc. The drawback to this is that you will have to change permissions before you can upload new/updated files, and then remember to change them back. It's basically impossible to guess what permissions are needed for your OSC install to write to a file. Telling someone to set it to 777 is an easy way out - it's usually guaranteed to work unless the host has other restrictions involved. Some webservers really do require that permissions be that wide open (though you don't need to allow execute privileges on a php file) before OSC can write to file, others only require full permissions for owner/group. Contributions Discount Coupon Codes Donations
WiseWombat Posted February 16, 2006 Posted February 16, 2006 I want to make sure that all my files are properly secured and not being an IT guy I am not sure what the proper setting on each file are. Is there a list or can someone make a general rule of thumb type list of what files should be set to what setting to ensure the files will be as safe as possible. Some files require the write enabled but by who? Is it only required for the user/group/other? What other things should I be aware of when making sure my site is protected. take alook here its very helpful for newbees. http://www.reallylinux.com/docs/consult.shtml ( WARNING ) I think I know what Im talking about. BACK UP BACK UP BACK UP BACK UP
Recommended Posts
Archived
This topic is now archived and is closed to further replies.