A world writeable directory is a security risk.  Why not just fix the
owner/group and only give the permissions needed, 775 at most.

-----Original Message-----
From: Dan Rossi [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 1:45 AM
To: [EMAIL PROTECTED]
Subject: RE: [PHP] Uploading Files Via PHP


did u even read it ? chmod 777 + owned by httpd

-----Original Message-----
From: Jason Wong [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 9:40 PM
To: [EMAIL PROTECTED]
Subject: Re: [PHP] Uploading Files Via PHP


On Thursday 27 March 2003 18:25, Marek Kilimajer wrote:
> not necesserily both, either of them is enought:

Not quite true :)

If owned by 'httpd' then 'httpd' still needs write permission (o+w).

> drwxrwxrwt    2 root     root       188416 Mar 27 11:23 /tmp
> or
> drwx------    2 apache     apache       188416 Mar 27 11:23
> /var/www/uploads
>
> daniel wrote:
> >possibly a permissions problem , dir needs to be 777 and owned by httpd

--
Jason Wong -> Gremlins Associates -> www.gremlins.biz
Open Source Software Systems Integrators
* Web Design & Hosting * Internet & Intranet Applications Development *
------------------------------------------
Search the list archives before you post
http://marc.theaimsgroup.com/?l=php-general
------------------------------------------
/*
In good speaking, should not the mind of the speaker know the truth of
the matter about which he is to speak?
                -- Plato
*/


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to