Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
enchantedstrike
New Member
New Member


Joined: Jan 14, 2008
Posts: 16

PostPosted: Tue Jan 15, 2008 9:55 am Reply with quote

Hi everyone,

I'm not sure where to post this, but i think this is the right area.

1ST -- I'm new to Nuke, PHP, etc...

2ND - I am running a Windows Server 2003 box with IIS6.0

I have a directory in C:\ called NUKETEST

inside are the phpnuke 8.1 files

What is the proper directory security for each of the folders (or the root folder of C:\NUKETEST)

I know i need to add IUSR_xxxxx and give read permisssion. What else to let phpnuke run properly and more importantly SECURELY!!!


Thanks everyone...

-Enchanted Strike
 
View user's profile Send private message
Gremmie
Former Moderator in Good Standing


Joined: Apr 06, 2006
Posts: 2415
Location: Iowa, USA

PostPosted: Tue Jan 15, 2008 12:03 pm Reply with quote

enchantedstrike wrote:
What else to let phpnuke run properly and more importantly SECURELY!!!


killing me

Seriously, if security is a concern of yours, STOP USING PHP-NUKE 8.1 RIGHT NOW.

RavenNuke has NukeSentinel integrated in it (security software) plus it has actually been TESTED and you can actually get SUPPORT for it here.

Smile

_________________
Only registered users can see links on this board! Get registered or login! - An Event Calendar for PHP-Nuke
Only registered users can see links on this board! Get registered or login! - A Google Maps Nuke Module 
View user's profile Send private message
enchantedstrike
PostPosted: Tue Jan 15, 2008 6:30 pm Reply with quote

OK GUYS....

I've had it with this phpnuke 8.1 CRAP BOMB...

What files do I need to download and can someone point me in the right direction to get RAVENNUKE (Whatever latest TESTED version) is installed?

Thanks...

I consider my self a pretty smart guy (except for my obvious need to run the LATEST and GREATEST version of all software)....lol

But... I give up... I don't know enough. I will keep it and move it to another box so I can PLAY and learn how this thing works...but that will be at my leisure.

Thanks for making me *** SEE THE LIGHT....


-Enchanted Strike
 
Gremmie
PostPosted: Tue Jan 15, 2008 7:53 pm Reply with quote

I suggest you download XAMPP which will allow you to install Apache, PHP, MySQL, etc, on your PC. It makes an ideal test environment to try these CMS systems out.

You can download RavenNuke here. The latest version is 2.10.01, but a new version is scheduled to come out later this month.
 
enchantedstrike
PostPosted: Tue Jan 15, 2008 8:36 pm Reply with quote

lol.... Great minds think alike. I'm installing XAMPP 1.6.5 as we speak on the server.


Thanks for all your help! I'm sure i'll need more. ROTFL
 
montego
Site Admin


Joined: Aug 29, 2004
Posts: 9449
Location: Arizona

PostPosted: Wed Jan 16, 2008 4:14 pm Reply with quote

enchantedstrike, welcome to our world! You are embarking on a journey... Smile But, you have come to the right place. Wink

_________________
Only registered users can see links on this board! Get registered or login!
Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
enchantedstrike
PostPosted: Wed Jan 16, 2008 9:30 pm Reply with quote

Thanks Montego...

I would like to say thank you to you and everyone else that has helped me during my "Baby Steps" phase of phpNuke, phpBB, PhP, MySql, etc...

I'm an independant IT consultant and have had a few requests to evalute these php-based CMS's versus the MS SharePoint Server/Portal. These are for more small to mid-level businesses that don't have the money to always use the High End/High cost MS products. Anyway...not going down that road here... MS has its place and I think, from what I have read and have seen, that phpNuke might have its own place too...

In the end I dont make the judgement call, i just lay out all the facts and let the client decide. It's their money and their business. I too own my own company, so I completely understand the need to save money wherever possible.

Enough about me...

On to better things and time to start tinkerin' with RN 2.10.01. Since its working now.


I do still have a few questions if anyone has any answers I'd be very appreciative.

Can someone with a UNIX <<AND>> Windows background explain to me the permissions I need to set on my files/directories?

I understand what CHMOD 777 and 666, etc... are. I'm just trying to figure out (Mentally) a "Translation" table for us Windows users.

It would be nice if someone could just say...

Dir1 --- Read Only
Dir2 --- Read/Write/Execute
Dir3 --- Deny ALL

Etc...


Thanks again guys (and gals, possibly???),

-Enchanted Strike
 
montego
PostPosted: Thu Jan 17, 2008 6:43 am Reply with quote

Can you even set the directory permissions on windows? (Sorry, cannot recall). Anyways, I will give you the *nix version.

It can depend upon what you are running. If you run PHP as a CGI with something like PHPSuExec, you can actually even use 700 on everything because PHP will run with your account user. However, this is not the "norm" in terms of web permissions. generally they will be:

Directories - 755
Files - 644

Then, there will be a few directories needing to be 777 (those that are to be written too by your PHP scipts). I.e., PHP cannot add files to a directory, typically, if its not 777.

Then, there will be a few files needing to be 666, if your PHP scripts must write to them (such as with NukeSentinel needing .htaccess set to this).

If you are just starting out with nuke, I would give strong consideration to RavenNuke. Within the HowToInstall manual it walks you through which directories / files need what permissions.
 
enchantedstrike
PostPosted: Thu Jan 17, 2008 8:16 am Reply with quote

I am running RN 2.10.01

I am running PhP in ISAPI mode not CGI.

I will look at the manual.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©