Public Forums 71,145 posts

[cgc0202 Friend cgc0202Join date: August 2007Posts: 2244Downloads:0Uploads:3 Thanks: 206 Thanked: 262 times in 1 posts]

#133460

Hello,

I was just wondering. In previous versions (before Joomla 1.5.7), the permissions for configuration.php set as 0644 so that I could manually change the values directly via FTP. In Joomla 1.5.7, I could not write (change) the values of configuration.php because as it turned out, it was set as 0444. I had to change it to 0644 to change the values — and back to 0444.

My question is: Is this a recent security feature? And, if so, why did Joomla take so long to recognize this? There are so many information information in the configuration.php that should not be viewed or accessed.

I have asked this question in a number of softwares, for related configuration.php files and many responses from the forums suggested that it was OK at 0644.

Cornelio

[Sherlock Friend SherlockJoin date: September 2014Posts: 11453Downloads:0Uploads:88 Thanks: 221 Thanked: 2478 times in 2162 posts]

#271136

Hi cgc0202 !
I have searched on joomla forum , but can’t find any post about this problem , i think we try to joomla forum and take a question about this problem.

[cgc0202 Friend cgc0202Join date: August 2007Posts: 2244Downloads:0Uploads:3 Thanks: 206 Thanked: 262 times in 1 posts]

#271147

Thanks Hainn,

It was more a rhetorical question. I asked the same question in other Forums, for a photogallery. software and TikiWiki. They said, it was not a security issue.

I just wonder if others have their set at 0444 also, as the default permission.

Cornelio

[Author]

Posts