On Tue, Oct 16, 2007 at 01:26:39PM -0400, Cliff Hirsch wrote:
>
> What is the best permission level? 644, 640?
Files should be owned and only writable by an administrative level user.
The web server should be run as an unprivileged user/group, which has
read only access to the files.
If your application needs to write files on the web server, for things
like error logging, there should be a special directory that has write
access by the web server's user/group.
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk
NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com
Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php
