By: Anonymous: runes ()  Apr 06 2009 19:35 pm (Read 4417 times)  

Hi, your documentation explains to chmod 777 a list of files-folders for installation. After the install do you have a detailed list of files and folders and what the permissions should be after the install is completed?

By: Geiss (offline)  Apr 06 2009 21:37 pm  

Hi runes,

Typically, you'll want to change those files/folders back to 755 permissions. I'd start there, and then depending upon the server setup (ie. if the user the webserver runs as) if you run into issues, set the following directories to 777 permissions:

private/logs/
private/data/
private/backups/

Thx!

Eric


Geiss



Group Comfort
Level:
: +58
Registered:: 02/15/07

Posts: 2097
By: Anonymous: TheKnyazz ()  May 31 2009 03:48 am  

By documentation i cmoded files to 777
Tell me plz, what should i do if i get that system secure messege?

Results of the Security Check

Good! You seem to have removed the install directory already.
Got an HTTP result code 302 when trying to test your db-config.php. Not sure what to make of it ...
Got an HTTP result code 302 when trying to test your logs directory. Not sure what to make of it ...
Got an HTTP result code 302 when trying to test your plugins directory. Not sure what to make of it ...
Got an HTTP result code 302 when trying to test your system directory. Not sure what to make of it ...
Your backups directory is reachable from the web.
This is a security risk and should be fixed!
Your data directory is reachable from the web.
This is a security risk and should be fixed!
Good! You seem to have changed the default account password already.


By: Mark (offline)  May 31 2009 08:46 am  

What this is telling us is:

You installed the private/ directory inside the web root, which could be OK if you followed the Webroot Installation instructions and renamed the private/ directory to something that would be difficult or impossible to guess.

If you left the name as private/ it means certain things such as database backups could be exposed to the whole Internet which wouldn't be a good thing.

Thanks!
Mark


glFusion - Enhanced Content Management

Mark



Group Comfort
Level:
: +112
Registered:: 10/21/05

Posts: 6442
By: Anonymous: TheKnyazz ()  Jun 02 2009 02:36 am  

Thx a lot for your answer. I followed at all by install FAQ. Renames private to unreadable name. But when i tried to install gl fusion with private outside the web root, i recevied errors with finding by the installer private folder outside the web root. Installer can't find db files, even i cmoded private folder and all the required files to 777.

5 posts :: Page 1 of 1
All times are CDT. The time is now 03:14 pm.
Normal Topic Normal Topic
Locked Topic Locked Topic
Sticky Topic Sticky Topic
New Post New Post
Sticky Topic w/ New Post Sticky Topic w/ New Post
Locked Topic w/ New Post Locked Topic w/ New Post