slim Posted May 30, 2008 Share Posted May 30, 2008 Hi just purchased WHMCS and have successfully installed it into a test folder on my server. Question: Should the following stay 777 /announcements.xml 777 /attachments 777 /downloads 777 /templates_c 777 The install guide only says to make the configuration 644 - But I thought havign any files 777 was a security risk? Can someone please advise. I would also reccommend updating the readme.txt file if the above should be 644. Thanks David 0 Quote Link to comment Share on other sites More sharing options...
bear Posted May 30, 2008 Share Posted May 30, 2008 They need to be writable. You can reduce risk by storing these folders above the site root. 0 Quote Link to comment Share on other sites More sharing options...
slim Posted May 30, 2008 Author Share Posted May 30, 2008 Thanks.. I have now moved these folders as suggested. As I run suphp I have made the three folders 755 and it seems to work. Thanks for your help. I feel a learning curve comming on.. Now to learn about importing from MB! 0 Quote Link to comment Share on other sites More sharing options...
brianoz Posted May 31, 2008 Share Posted May 31, 2008 If you run suphp, they should definitely NOT be writable; the writable part is only for those people foolhardy enough to be running servers without suphp or phpsuexec. For some reason that escapes me, this still isn't well understood in the web hosting community ... 0 Quote Link to comment Share on other sites More sharing options...
bear Posted May 31, 2008 Share Posted May 31, 2008 Of course, there are those with properly configured servers that don't suffer the issues as much as others when using writable directories... 0 Quote Link to comment Share on other sites More sharing options...
brianoz Posted June 1, 2008 Share Posted June 1, 2008 Absolutely, and I should have made that point! 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.