MyBB Community Forums

Full Version: Security concern: file permission of inc/settings.php
You're currently viewing a stripped down version of our content. View the full version with proper formatting.

Is it okay to leave the file permission of "inc/settings.php" as 666 after installing MyBB? Would changing it to 444 be better?

Thank you.
It needs to be writable by PHP, so you can change it to the most restrictive settings that your system will allow. 444 won't allow writing at all, 644 is unlikely to work, but 664 sometimes can. ./inc/config.php can probably be set to 444 though, maybe changing to be writable during upgrades in case anything needs to change.
@Matt: thank you so much Smile