Hi, I'm developing a web app using LAMP, my php login page have 2 textboxes fields and a background image, the issue that i had is that the background page did not display, checking the apache log found that i had a permission denied accessing to the image; so after hours dealing with this I change the permissions of the directory to rwxXst. I know it is to much but finally the image was displayed.
So, at this time, all images and php files have this permissions:
-rw-r--r--
and the directories have:
drwsrwsrwt
so, my questions are:
thinking and security and best practices
1. what permissions should I set to the files (php files, jpg, css, etc) and directories?
- should my app works as a virtualhost, why?
regards
