PHP and File Permissions

[MattHawkins]

Hi Everyone,

I've got some PHP scripts that either create new files or edit existing ones. (These are DIY scripts and use fopen usually with the "w" parameter).

The only way I can appear to get the scripts to operate correctly is to set the file permissions to 777. Now this makes me nervous

I read that on EUKHost websites files with permission 777 are OK because the server has some sort of security mod that makes it safe (http://www.eukhost.com/support/knowl...gory/security/)

Can some from EUKHost confirm that files with permissions are OK set at 777 ?

I hope that this post will be useful to others because I have always found file permissions difficult to deal with because all web hosts seem to deal with them in different ways.

Thanks,

Matt

[flesso]

Originally Posted by MattHawkins

Hi Everyone,

I've got some PHP scripts that either create new files or edit existing ones. (These are DIY scripts and use fopen usually with the "w" parameter).

The only way I can appear to get the scripts to operate correctly is to set the file permissions to 777. Now this makes me nervous

I read that on EUKHost websites files with permission 777 are OK because the server has some sort of security mod that makes it safe (http://www.eukhost.com/support/knowl...gory/security/)

Can some from EUKHost confirm that files with permissions are OK set at 777 ?

I hope that this post will be useful to others because I have always found file permissions difficult to deal with because all web hosts seem to deal with them in different ways.

Thanks,

Matt

You should be fine with using 777 permissions on the scripts. If anyone does try to get through eUKhost have very tight mod_security rules which will stop them.

[MattHawkins]

Thanks flesso for the quick reply. I just needed to make sure I wasn't doing something stupid!

So far I'm very impressed with EUKHosts support system. A forum is always useful and the huge quantity of tutorials,faqs and guides is excellent.

[DPS Computing]

Originally Posted by flesso

You should be fine with using 777 permissions on the scripts. If anyone does try to get through eUKhost have very tight mod_security rules which will stop them.

Hopefully you haven't disabled mod_security on your account have you?

[MattHawkins]

Haven't deliberately disabled mod_security so it should be running by default.

[DPS Computing]

Originally Posted by MattHawkins

Haven't deliberately disabled mod_security so it should be running by default.

Yes it will be then. Was just checking that your website was still secure. Unless you specifically disable mod_security using a .htaccess file it will be enabled for your account .

[Coomkeen]

Hi,

I've got:

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

in the htaccess file as recommended in a sticky somewhere.

Is this OK?

I use a lot of 777 permissions and 'w' type file writes like MattHawkins.

Ron.

[eUKhost.com]

Originally Posted by Coomkeen

Hi,

I've got:

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>

in the htaccess file as recommended in a sticky somewhere.

Is this OK?

I use a lot of 777 permissions and 'w' type file writes like MattHawkins.

Ron.

Hello Ron,

777 permission is unsafe as you are allowing everyone to write on respective file or directory. 755 is safe and there should be absolutely no problem with 755