SunQuest
           Server Administration
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Codewalkers ForumsOther TechnologiesServer Administration

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Codewalkers Forums Sponsor:
AT&T devCentral & BlackBerry(r) Webcast Series: BlackBerry and GPS -Build Location Awareness into your BlackBerry Applications, July 10th-1:00PM EST. Register Today!
  #1  
Old October 27th, 2005, 06:17 PM
h4x0rmx h4x0rmx is offline
Codewalkers Newbie (0 - 499 posts)
 
Join Date: Apr 2007
Posts: 6 h4x0rmx User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
chmod 777? Make it secure?

Hello, I just made a site with image galleries, I'm not storing the images on a database, but instead on the file system.
I have a folder /uploads
with CHMOD 777 (i believe) so the uploaded images could be uploaded.
I believe this is really insecure for the server and for the site.
Can anyone tell me how make this site a secure one?
.htaccess files may help? But how do I use them?
any help will be really appreciated!

Reply With Quote
  #2  
Old November 2nd, 2005, 12:27 AM
sleighboy sleighboy is offline
Codewalkers Newbie (0 - 499 posts)
 
Join Date: Apr 2007
Posts: 49 sleighboy User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 2
RE: chmod 777? Make it secure?

I guess it depends who runs the server. If the user/group that Apache is run under is the owner/group for the directory I'd use 775 instead.

But you can put an htaccess file in that directory and limit the HTTP requests to GET.

<Limit GET>
Require valid-user
</Limit>

That is SOME peace of mind.

Reply With Quote
  #3  
Old March 6th, 2006, 04:21 PM
Anonymous Anonymous is offline
Registered User
Codewalkers God 35th Plane (22000 - 22499 posts)
 
Join Date: Apr 2007
Posts: 22,309 Anonymous User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 24
RE: chmod 777? Make it secure?

I was wondering the same thing lol

Reply With Quote
  #4  
Old March 7th, 2006, 05:48 PM
Andrew's Avatar
Andrew Andrew is offline
Moderator
Click here for more information
 
Join Date: Apr 2007
Location: United Kingdom
Posts: 1,937 Andrew User rank is Private First Class (20 - 50 Reputation Level)Andrew User rank is Private First Class (20 - 50 Reputation Level)  Folding Points: 2429 Folding Title: Novice Folder
Time spent in forums: 4 Days 1 h 57 m 37 sec
Reputation Power: 3
Orkut
RE: chmod 777? Make it secure?

744 seems to be my number at the moment, php5 seems to complain if its anything higher, complains about write and execute access to world etc. 777 is not secure by any stretch of the imagination. Also just changing the chmod number is not exactly bullet proof security IMO

Reply With Quote
Reply

Viewing: Codewalkers ForumsOther TechnologiesServer Administration > chmod 777? Make it secure?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway