Joomla Templates Club 406,261 posts

[ccvpguy Friend ccvpguyJoin date: February 2009Posts: 72Downloads:0Uploads:5 Thanks: 29 Thanked: 10 times in 5 posts]

#140591

Hello;

I am currently finishing new site which is based on Template Ja Teline II.

Every file or folder is set to persmission 666 by default, I am not unix or Joomla expert, and I need assistance and your advice in order to secure the site before I launch.

I know it sound silly but please advice me what folder/file shouldn’t be assigned 666 by default.

I don’t have live site yet, it is in my localhost

Thanks,

[John Wesley Brett Moderator John Wesley BrettJoin date: July 2013Posts: 2142Downloads:17Uploads:26 Thanks: 175 Thanked: 645 times in 426 posts]

#302535

The standard, default permissions that get assigned to files and directories by the server are normally;

Files = 644 and Directories = 755

These permissions would allow, for files;

644 = rw- r– r– = Owner has Read and Write
Group has Read only
Other has Read only

and for directories;

755 = rwx r-x r-x = Owner has Read, Write and Execute
Group has Read and Execute only
Other has Read and Execute only

Hope this helps.
John.

1 user says Thank You to John Wesley Brett for this useful post

1. ccvpguy

[Phill Moderator PhillJoin date: February 2014Posts: 7013Downloads:40Uploads:77 Thanks: 917 Thanked: 2206 times in 1818 posts]

#302541

If you have root acces and are the host then you probably do not have umask set properly if things are defaulting to 666.

I believe this article explains it better than I could

http://www.linuxforums.org/security/file_permissions.html

1 user says Thank You to Phill for this useful post

1. ccvpguy

[ccvpguy Friend ccvpguyJoin date: February 2009Posts: 72Downloads:0Uploads:5 Thanks: 29 Thanked: 10 times in 5 posts]

#302599

<em>@phill luckhurst 125941 wrote:</em><blockquote>If you have root acces and are the host then you probably do not have umask set properly if things are defaulting to 666.

I believe this article explains it better than I could

http://www.linuxforums.org/security/file_permissions.html</blockquote>

It seems this instruction i based on UNIX, am not sure how i can run Unmask on command line or windows. I am running WAMP, but all i did was intall the quickstart instruction from JA.

Thanks

[Phill Moderator PhillJoin date: February 2014Posts: 7013Downloads:40Uploads:77 Thanks: 917 Thanked: 2206 times in 1818 posts]

#302602

Ah, you mentioned Unix in your first post so I assumed that is what you were talking about.

Until you upload them file permissions for your server will not be set so no need to worry on the windows side.

1 user says Thank You to Phill for this useful post

1. ccvpguy

[ccvpguy Friend ccvpguyJoin date: February 2009Posts: 72Downloads:0Uploads:5 Thanks: 29 Thanked: 10 times in 5 posts]

#302606

<em>@phill luckhurst 126015 wrote:</em><blockquote>Ah, you mentioned Unix in your first post so I assumed that is what you were talking about.

Until you upload them file permissions for your server will not be set so no need to worry on the windows side.</blockquote>

Thanks, that makes me feel comforable.

Thanks,

[Author]

Posts