Hi, your documentation explains to chmod 777 a list of files-folders for installation. After the install do you have a detailed list of files and folders and what the permissions should be after the install is completed?

Hi runes,

Typically, you'll want to change those files/folders back to 755 permissions. I'd start there, and then depending upon the server setup (ie. if the user the webserver runs as) if you run into issues, set the following directories to 777 permissions:

private/logs/
private/data/
private/backups/

Thx!

Eric

By documentation i cmoded files to 777
Tell me plz, what should i do if i get that system secure messege?

Results of the Security Check

Good! You seem to have removed the install directory already.
Got an HTTP result code 302 when trying to test your db-config.php. Not sure what to make of it ...
Got an HTTP result code 302 when trying to test your logs directory. Not sure what to make of it ...
Got an HTTP result code 302 when trying to test your plugins directory. Not sure what to make of it ...
Got an HTTP result code 302 when trying to test your system directory. Not sure what to make of it ...
Your backups directory is reachable from the web.
This is a security risk and should be fixed!
Your data directory is reachable from the web.
This is a security risk and should be fixed!
Good! You seem to have changed the default account password already.

What this is telling us is:

You installed the private/ directory inside the web root, which could be OK if you followed the Webroot Installation instructions and renamed the private/ directory to something that would be difficult or impossible to guess.

If you left the name as private/ it means certain things such as database backups could be exposed to the whole Internet which wouldn't be a good thing.

Thanks!
Mark

Thx a lot for your answer. I followed at all by install FAQ. Renames private to unreadable name. But when i tried to install gl fusion with private outside the web root, i recevied errors with finding by the installer private folder outside the web root. Installer can't find db files, even i cmoded private folder and all the required files to 777.