<em>@ErikThorsen 13820 wrote:</em><blockquote>Also make sure that your config file is set to 644 after making necessary changes. And make sure that files/folders which should not be set to 777 isn’t. Most errors and attacks is because of the settings ( chmod ) of files and folders and usually these are related to the config file itself set to 777</blockquote>
actually it’s not about 644 / 777 or other magic numbers. the basic principle is to give your files and dirs proper permission so that it can run safely.
once you’re playing with suexec where apache uid = your uid, you’ll find that 711 is enough 🙂