开发者

Question about directory permissions with PHP

开发者 https://www.devze.com 2023-01-05 09:35 出处:网络
Recently, while working on a shared host, I accidenta开发者_开发技巧lly changed the permissions of my root website directory to 777. The correct permissions should have been 755.

Recently, while working on a shared host, I accidenta开发者_开发技巧lly changed the permissions of my root website directory to 777. The correct permissions should have been 755.

Instantly, I started getting the "Internal Server Error" message for my pages. I figured that the Apache server wanted to stop requests because of a security threat.

I wonder what threat can be caused by giving full permissions to the root directory.

Can someone throw light on that?

Thanks!


If a file chmod is 777, it will be easier for a cracker to upload malicious scripts in your server or modify your pages, etc. For that reason, only directories where users can upload files should have a public write right.

For your web pages that are not designed to be modified dynamically by the website, a 755 chmod is more secured.


There are a variety of answers, but it maybe that Apache doesn't want .htpasswd and .htaccess files to be readable by anyone.

0

精彩评论

暂无评论...
验证码 换一张
取 消