search

fuel / core

Fuel PHP Framework - The core of the Fuel v1 framework
http://fuelphp.com
813 stars 345 forks source link

Fuelphp 1.6 zip file ships with incorrect permissions on /public/.htaccess file? #1456

Closed ipsod closed 11 years ago

ipsod commented 11 years ago

I get a "you do not have permission to access..." error when trying to access any page after manually installing fuelphp 1.6 according to the directions. The error is resolved by running chmod 775 on the .htaccess file in the public folder, though maybe I should do a chown instead?

WanWizard commented 11 years ago

That depends. It doesn't have world-rights for some reason at the moment, but ideally none of your files should have world rights set, as that might be a security issue. So if you need those rights, you might have to take a look at your permissions anyway.

kenjis commented 11 years ago

The .htaccess file has permission -rw-rwx---. It is the only file in the Zip file which others can't read.

Web server running as nobody can't read it. Why don't you set to 644? What is the some reason?

WanWizard commented 11 years ago

I didn't say I wouldn't change it. :smirk: Already did, but haven't pushed it yet.

A webserver running as nobody should still be member of a group that has read access on the files. World rights are always a bad idea.

WanWizard commented 11 years ago

It is correct in the repo, but wrong in the zipfile for some reason.