PHPNuke 8.1 and Directory Security (WINDOWS)

New Member Joined: Jan 14, 2008 Posts: 16

Hi everyone,

I'm not sure where to post this, but i think this is the right area.

1ST -- I'm new to Nuke, PHP, etc...

2ND - I am running a Windows Server 2003 box with IIS6.0

I have a directory in C:\ called NUKETEST

inside are the phpnuke 8.1 files

What is the proper directory security for each of the folders (or the root folder of C:\NUKETEST)

I know i need to add IUSR_xxxxx and give read permisssion. What else to let phpnuke run properly and more importantly SECURELY!!!

Thanks everyone...

-Enchanted Strike

Posted: Tue Jan 15, 2008 12:03 pm

enchantedstrike wrote:

What else to let phpnuke run properly and more importantly SECURELY!!!

Seriously, if security is a concern of yours, STOP USING PHP-NUKE 8.1 RIGHT NOW.

RavenNuke has NukeSentinel integrated in it (security software) plus it has actually been TESTED and you can actually get SUPPORT for it here.

Smile

Posted: Tue Jan 15, 2008 6:30 pm

OK GUYS....

I've had it with this phpnuke 8.1 CRAP BOMB...

What files do I need to download and can someone point me in the right direction to get RAVENNUKE (Whatever latest TESTED version) is installed?

Thanks...

I consider my self a pretty smart guy (except for my obvious need to run the LATEST and GREATEST version of all software)....lol

But... I give up... I don't know enough. I will keep it and move it to another box so I can PLAY and learn how this thing works...but that will be at my leisure.

Thanks for making me *** SEE THE LIGHT....

-Enchanted Strike

Posted: Tue Jan 15, 2008 7:53 pm

I suggest you download XAMPP which will allow you to install Apache, PHP, MySQL, etc, on your PC. It makes an ideal test environment to try these CMS systems out.

You can download RavenNuke here. The latest version is 2.10.01, but a new version is scheduled to come out later this month.

Posted: Tue Jan 15, 2008 8:36 pm

lol.... Great minds think alike. I'm installing XAMPP 1.6.5 as we speak on the server.

Thanks for all your help! I'm sure i'll need more. ROTFL

Posted: Wed Jan 16, 2008 4:14 pm

enchantedstrike, welcome to our world! You are embarking on a journey... Smile

But, you have come to the right place. Wink

Posted: Wed Jan 16, 2008 9:30 pm

Thanks Montego...

I would like to say thank you to you and everyone else that has helped me during my "Baby Steps" phase of phpNuke, phpBB, PhP, MySql, etc...

I'm an independant IT consultant and have had a few requests to evalute these php-based CMS's versus the MS SharePoint Server/Portal. These are for more small to mid-level businesses that don't have the money to always use the High End/High cost MS products. Anyway...not going down that road here... MS has its place and I think, from what I have read and have seen, that phpNuke might have its own place too...

In the end I dont make the judgement call, i just lay out all the facts and let the client decide. It's their money and their business. I too own my own company, so I completely understand the need to save money wherever possible.

Enough about me...

On to better things and time to start tinkerin' with RN 2.10.01. Since its working now.

I do still have a few questions if anyone has any answers I'd be very appreciative.

Can someone with a UNIX <<AND>> Windows background explain to me the permissions I need to set on my files/directories?

I understand what CHMOD 777 and 666, etc... are. I'm just trying to figure out (Mentally) a "Translation" table for us Windows users.

It would be nice if someone could just say...

Dir1 --- Read Only
Dir2 --- Read/Write/Execute
Dir3 --- Deny ALL

Etc...

Thanks again guys (and gals, possibly???),

-Enchanted Strike

Posted: Thu Jan 17, 2008 6:43 am

Can you even set the directory permissions on windows? (Sorry, cannot recall). Anyways, I will give you the *nix version.

It can depend upon what you are running. If you run PHP as a CGI with something like PHPSuExec, you can actually even use 700 on everything because PHP will run with your account user. However, this is not the "norm" in terms of web permissions. generally they will be:

Directories - 755
Files - 644

Then, there will be a few directories needing to be 777 (those that are to be written too by your PHP scipts). I.e., PHP cannot add files to a directory, typically, if its not 777.

Then, there will be a few files needing to be 666, if your PHP scripts must write to them (such as with NukeSentinel needing .htaccess set to this).

If you are just starting out with nuke, I would give strong consideration to RavenNuke. Within the HowToInstall manual it walks you through which directories / files need what permissions.

Posted: Thu Jan 17, 2008 8:16 am

I am running RN 2.10.01

I am running PhP in ISAPI mode not CGI.

I will look at the manual.