[RESOLVED] Security (folder permissions)

[dougal85]

I guess this is more a apache question...

If a folder if set to CHMOD 777... I know this means that somebody can write in it.

But who can write in it? How can somebody expose this as a securty issue?

Why do i ask? I'm creating a script for dealing with uploaded pictures... reasize, rename and move.

[bradgrafelman]

dougal85 wrote:

But who can write in it?

Anyone. 777 means owner, group, and normal users have full permissions to the directory - read, write, and execute.

dougal85 wrote:

How can somebody expose this as a securty issue?

Anyone with access to your server, or the ability to execute PHP scripts while PHP is not in Safe Mode, can alter files in this directory.

[dougal85]

So... your average joe visting the website cant and only local scripts can?

[bradgrafelman]

What problem? Why hijack someone else's thread? Try posting a new thread, and actually tell us what exactly your 'problem' is.

[dougal85]

lol, yeah. I think my original post was just a question... I didnt really have a problem so i guess we need more explication.