search

getpinga / tide

Tide client area theme for FOSSBilling
MIT License
16 stars 10 forks source link

Changing instructions to fix file access permissions #19

Closed Anuril closed 12 months ago

Anuril commented 1 year ago

I've changed the instructions so the settings and assets won't be readable by world (750 instead of 777).

It's important to make sure the files are owned by the user which runs the webserver.

getpinga commented 12 months ago

Unfortunately I'll have to decline it. It does not work with 750 ownership rights. The system itself told me to make them 777.

Anuril commented 12 months ago

I would strongly advise that you reconsider.

Making a file writeable by anyone ( the last 7 of 777) means any user can overwrite the configuration and / or potentially take over the system.

Also, any uploads into any directory with these permissions can be executed (by anyone). This creates a very insecure system.

Many webhosters won't even allow 777

Please provide the log files or error message so we can debug this properly.

Sincerely, Anuril