Security Directory Permissions

[aspire321]

I have a question for Security Directory Permissions  on Oscommerce v2.3.4.1

It says some directories are writable, but some are not recommended to be writable.

Is it necessary to make all of those directories then to non-writable?

Thanks.

[Jack_mcs]

For modern servers, all directories should be 755 and all files except the configure files should be 644. The configure files should be 444 or less.  Some host still require 777. If you have such a host, you should switch.

[aspire321]

Thanks Jack for the reply, I'll check and rectify shortly.

[aspire321]

I checked and most files are set to 604.

Most directories set to 705.

Configure files are 404.

 

[Jack_mcs]

Those are fine as long as they don't prevent any part of the shop from working correctly.