MyBB Community Forums
Security concern: file permission of inc/settings.php - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: 1.8 Support (https://community.mybb.com/forum-175.html)
+--- Forum: Installation and Upgrades Support (https://community.mybb.com/forum-182.html)
+--- Thread: Security concern: file permission of inc/settings.php (/thread-233588.html)



Security concern: file permission of inc/settings.php - nttalex - 2021-09-20

Hello,

Is it okay to leave the file permission of "inc/settings.php" as 666 after installing MyBB? Would changing it to 444 be better?

Thank you.


RE: Security concern: file permission of inc/settings.php - Matt - 2021-09-20

It needs to be writable by PHP, so you can change it to the most restrictive settings that your system will allow. 444 won't allow writing at all, 644 is unlikely to work, but 664 sometimes can. ./inc/config.php can probably be set to 444 though, maybe changing to be writable during upgrades in case anything needs to change.


RE: Security concern: file permission of inc/settings.php - nttalex - 2021-09-20

@Matt: thank you so much Smile