Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
izone
Involved
Involved


Joined: Sep 07, 2004
Posts: 354
Location: Sweden

PostPosted: Wed Jul 12, 2006 7:08 am Reply with quote

Hi,

In some modules like Link-to-us and (if I remember well) Nsn-Download you have to change permission for some catalogs to 777.

My question is, by doing this don't we make it easier for a hacker to upload files to these catalogs and run it there?

This guy says no!
Only registered users can see links on this board! Get registered or login!

What is your answer? (I'm just worried about this issue because we got hacked recently).

Appreciate your answers.
 
View user's profile Send private message
montego
Site Admin


Joined: Aug 29, 2004
Posts: 9449
Location: Arizona

PostPosted: Wed Jul 12, 2006 7:24 am Reply with quote

Well, that is somewhat of a loaded question, or really a loaded answer. I agree with most of what has been said in the referenced thread, but unfortunately, there is just too much there to try and comment on.

The bottom line really is that if you can avoid using it, I would avoid it. If you must be able to upload files to a directory OR in come cases have to allow a PHP script to create a new file in a directory, you may be forced to use 777. I would start with 770 or lower first and work your way up until your script works. I would also recommend only doing this in low-level directories and non-recursively (i.e., limit it only to the one directory that is required).

Sorry that I could not comment further.

_________________
Only registered users can see links on this board! Get registered or login!
Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©