PHP Security in Folders

mapg

Hi All,

I have programmed several PHP scripts which write and remove files over "EMPTY" folders and only accessed by these PHP scripts.

I would like to know what is more secure:

1.- To enable permissions of these folders with chown nobody/nobody (how is running my PHP) and chmod 644 or ...
2.- To enable permissions of these folders with chmod 777 and chown user_name/group_name (namely the default UID and GID of my site).

Thank you in advance for your for your information

Mapg

TenFold

probably number 1. you could do chmod 744, because the first number out of the 3 means the scripts access, and the other 2 mean group and others, which is readonly access. you dont want 777, because then, if im guessing right, they could write to your site somehow through their scripts because your giving them all level 7 access, which is read, write, and execute. Hope I helped lol 🙂

mapg

Thank you for your reply.

Yes. In others forums, everybody told me the same thing. I have done that.

Regards,

Mapg