Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Not Solved [Security] CHMOD Issues? Unable To Change To CHMOD 644 or 744
#1
Not Solved
Before I start... I am currently using a VPS setup. For more info, go HERE.

As I was reading through some of the threads and the MyBB docs, it was recommended to change all folders/files to CHMOD 644. 
(except for the ../uploads/avatars - that is/was always at CHMOD 777)

This morning, I had changed all folders/files to CHMOD 644 through my FTP program.

After that was completed, my attempt to log into my website resulted in a 500 page error. 

After that failure, I changed the CHMOD to 744 to make the website work. That did not work, I still got the 500 page error.

So, I changed the CHMOD to 777 and now the website is working.

Why can't I change the CHMOD to 644 to provide extra security?

Is it because I am using VPS instead of shared hosting? Or is it something else?


(MyBB mods, move this thread to the appropriate topical forum, if necessary)
I'm Serpius and You're Not    ¯\_(ツ)_/¯
[Image: 5M7sb0n.png?1]
Reply
#2
Not Solved
755 is what folders need. They need the execute bit. Files can be 644.
Reply
#3
Not Solved
(06-12-2019, 07:15 PM)labrocca Wrote: 755 is what folders need. They need the execute bit. Files can be 644.
And it's not MyBB dependant, it's how *nix file system (and permissions) works.
[MyBB 1.8 mods] - Offer me a coffee
Do not ask me help through PM
Reply
#4
Not Solved
(06-12-2019, 07:15 PM)labrocca Wrote: 755 is what folders need. They need the execute bit. Files can be 644.

Aha! That's the difference there.

I will give that a try and report back here.

(06-12-2019, 09:36 PM)Crazycat Wrote:
(06-12-2019, 07:15 PM)labrocca Wrote: 755 is what folders need. They need the execute bit. Files can be 644.
And it's not MyBB dependant, it's how *nix file system (and permissions) works.

I do understand that this is not specific towards MyBB forum software, in fact, many CMS software can benefit from this.

However, many admins are not aware of this method of protecting their website files and this is one way of doing this.

My reason for posting this is trying to understand why 2 CHMOD methods did not work, but one did.

@labrocca gave a simple explanation for this.
I'm Serpius and You're Not    ¯\_(ツ)_/¯
[Image: 5M7sb0n.png?1]
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)