Comments on: PHP – Chmod-ed to Windows hell and back http://binarykitten.com/dev/php/159-php-chmod-ed-to-windows-hell-and-back.html Curently a work in progress. Please be patient Thu, 29 Dec 2011 11:41:40 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: BinaryKitten http://binarykitten.com/dev/php/159-php-chmod-ed-to-windows-hell-and-back.html/comment-page-1#comment-37 BinaryKitten Wed, 11 Mar 2009 01:18:15 +0000 http://binarykitten.jkrswebsolutions.co.uk/?p=159#comment-37 RE: Ian .... Good Point. 644 should be good enough .. will make the changes and test :) Thanks RE: Ian …. Good Point. 644 should be good enough .. will make the changes and test :) Thanks

]]> By: BinaryKitten http://binarykitten.com/dev/php/159-php-chmod-ed-to-windows-hell-and-back.html/comment-page-1#comment-36 BinaryKitten Wed, 11 Mar 2009 01:17:37 +0000 http://binarykitten.jkrswebsolutions.co.uk/?p=159#comment-36 RE:Alister It's where I went in the end and prompted the double check RE:Alister It’s where I went in the end and prompted the double check

]]> By: Alister http://binarykitten.com/dev/php/159-php-chmod-ed-to-windows-hell-and-back.html/comment-page-1#comment-35 Alister Tue, 10 Mar 2009 21:48:52 +0000 http://binarykitten.jkrswebsolutions.co.uk/?p=159#comment-35 I was adding to to image resizing code myself today - and double-checked http://php.net/chmod where it makes the same reminder. I was adding to to image resizing code myself today – and double-checked http://php.net/chmod where it makes the same reminder.

]]> By: Ian P. Christian http://binarykitten.com/dev/php/159-php-chmod-ed-to-windows-hell-and-back.html/comment-page-1#comment-34 Ian P. Christian Tue, 10 Mar 2009 21:20:39 +0000 http://binarykitten.jkrswebsolutions.co.uk/?p=159#comment-34 I'd strongly suggest you don't use 777 - or if you are (and releasing the code) , you should make it an easy to configure option. So many PHP apps will default to using 777 for things, which is a huge mistake. Not all hosts run the same - some will use the apache module, where as others will use CGI - and therfore 770 would make a far better choice. The 'other' ownership issue aside, '7' is incorrect for images, you'd want 6 (read,write). Setting '7' means execute, and could potentially result in exploitable situations. If in doubt, 664 is probably your best choice. I’d strongly suggest you don’t use 777 – or if you are (and releasing the code) , you should make it an easy to configure option.

So many PHP apps will default to using 777 for things, which is a huge mistake. Not all hosts run the same – some will use the apache module, where as others will use CGI – and therfore 770 would make a far better choice.

The ‘other’ ownership issue aside, ’7′ is incorrect for images, you’d want 6 (read,write). Setting ’7′ means execute, and could potentially result in exploitable situations. If in doubt, 664 is probably your best choice.

]]>