Joomlatwork
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 20, 2013, 07:34:26 AM

Login with username, password and session length
Search:     Advanced search
16125 Posts in 5297 Topics by 11003 Members
Latest Member: ABATHEQUENE
* Home Help Search Login Register
+  Joomlatwork
|-+  Joomla SEF Patch extended version support (paid version)
| |-+  Installation questions
| | |-+  What are Safe CHMOD Settings Post Install?
« previous next »
Pages: [1] Print
Author Topic: What are Safe CHMOD Settings Post Install?  (Read 2621 times)
webgyrl
Newbie
*
Posts: 22


View Profile
« on: September 05, 2009, 09:09:07 PM »

Just wanted to know what I should CHMOD these files to after installation of SEF Patch is complete? Or do they need to stay writeable?
XML files:
administrator/components/com_content/models/article.xml
components/com_content/views/category/tmpl/blog.xml
components/com_content/views/category/tmpl/default.xml
components/com_content/views/frontpage/tmpl/default.xml
components/com_content/views/section/tmpl/blog.xml
components/com_content/views/section/tmpl/default.xml
components/com_content/views/archive/tmpl/default.xml

What is the best setting for security?

Thanks!
Logged
joomlatwork
Administrator
Hero Member
*****
Posts: 2817


View Profile Email
« Reply #1 on: September 06, 2009, 08:59:21 AM »

The best way is to make it for the owner of the file readable. So it depends if who is the owner of the files and on which user apache is runnning (most of the time nobody).

Regards,

Richard
Logged
webgyrl
Newbie
*
Posts: 22


View Profile
« Reply #2 on: September 06, 2009, 05:06:39 PM »

Can you tell me what the values would be, 400?


Right now it is 777, they were originally at 644

I think Apache runs on Nobody or the actual account username. How can I find out what it is?

Thanks Richard!
« Last Edit: September 06, 2009, 05:10:03 PM by webgyrl » Logged
joomlatwork
Administrator
Hero Member
*****
Posts: 2817


View Profile Email
« Reply #3 on: September 07, 2009, 12:08:53 PM »

Can you access your site with ssh? the use the command : ls -all to see the owner.

You can also use winscp (http://winscp.net => free ssh / FTP tool). There you will see in the browser window the owner.

Also notice that you should set it to readable after you have completed the configuration of the META data fields. Otherwise the fields can not be update in the related XML files.

Regards,

Richard
Logged
webgyrl
Newbie
*
Posts: 22


View Profile
« Reply #4 on: September 07, 2009, 04:17:42 PM »

Can you access your site with ssh? the use the command : ls -all to see the owner.

You can also use winscp (http://winscp.net => free ssh / FTP tool). There you will see in the browser window the owner.

Also notice that you should set it to readable after you have completed the configuration of the META data fields. Otherwise the fields can not be update in the related XML files.

Regards,

Richard

Hi Richard,

I am on a shared hosting environment and do not have SSH access. Not sure at all what the owner says, usually it is the "name" of the account. Usually if permissions are set to nobody i have a lot of problems and have to email my host to set them to the proper owner.

Would 400 work fine for security after I have completed configuration of the META fields?

Or is there some question I should ask my hosting company so you can give me the correct values?

Thanks again!
Logged
joomlatwork
Administrator
Hero Member
*****
Posts: 2817


View Profile Email
« Reply #5 on: September 08, 2009, 03:55:38 PM »

The best way is to set it readable notice that is 444

Regards,

Richard
Logged
Pages: [1] Print 
« previous next »
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.12 | SMF © 2006-2009, Simple Machines LLC Valid XHTML 1.0! Valid CSS!