icon Get the most out of Surmunity, read our tips here! Need an interesting blog to read? You've got to read the Surpass Blog! | Welcome! Please register to access all of our features.
Old August 10th, 2004, 4:55 PM   #1 (permalink)
Registered User
Comfy Contributor
 
andymaung's Avatar
 
Joined in Apr 2004
Lives in Asia
Hosted on Sky
123 posts
Gave thanks: 0
Thanked 0 times
Question File with permissions

I am using filemanager v3.0 module on XOOPS!
This module is very useful for me to upload the files as I have problem with ftp programs and our ISP's server.

I only worry that if I use that filemanager module, I need to chmod'd almost everything to 777 in able to upload.

Is any expert here can advise me whether it is secure for my site to do that?

Thanks a lot.
andymaung is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 10th, 2004, 5:44 PM   #2 (permalink)
Senior Member
Excelling Contributor
 
Joined in Jun 2004
748 posts
Gave thanks: 0
Thanked 0 times
For security, my advice to you would be to change the permissions to unwritable when each time you are done uploading files.

I know it's a little more work for you to have to keep changing permission each time you want to upload something, but in the long run, it makes for more security.
imsleepy is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 10th, 2004, 6:58 PM   #3 (permalink)
Registered User
Comfy Contributor
 
andymaung's Avatar
 
Joined in Apr 2004
Lives in Asia
Hosted on Sky
123 posts
Gave thanks: 0
Thanked 0 times
If I leave all folders at 777, is it possible to attack my site? What can be happen? Should I need to worry about this?
andymaung is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 10th, 2004, 7:26 PM   #4 (permalink)
minor deity
Super #1
 
Bigjohn's Avatar
 
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,395 posts
Gave thanks: 28
Thanked 94 times
Yes.
__________________
Proud to be a Surmunity Mod!
XEON PASS60 PASS61
Make a fundamental difference!
My Sites:
Curious about Brewing Beer? Join the community!
>>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax
Get into an Art museum
Victorian London
It's your brain -ON WEB - mybrainhost.com (under development)
What SHOULD Government do? Much Less than it Does!
Bigjohn is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 10th, 2004, 7:39 PM   #5 (permalink)
Registered User
Comfy Contributor
 
andymaung's Avatar
 
Joined in Apr 2004
Lives in Asia
Hosted on Sky
123 posts
Gave thanks: 0
Thanked 0 times

Any other way to protect?
andymaung is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 11th, 2004, 8:23 PM   #6 (permalink)
rocks your socks.
Resident.
 
David's Avatar
 
Joined in Mar 2004
Lives in fear of Obama.
Hosted on Pass 7
13,160 posts
Gave thanks: 8
Thanked 35 times
I don't use the filemanager program for that simple fact: it's about as secure as leaving the door open and waving a sign that says "free entrance".

Your best bet is going to be to just use an FTP program.
__________________
Quote:
Originally Posted by removed View Post
Internet Explorer rules.
David is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 11th, 2004, 8:47 PM   #7 (permalink)
minor deity
Super #1
 
Bigjohn's Avatar
 
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,395 posts
Gave thanks: 28
Thanked 94 times
Quote:
Originally Posted by djsckizo
I don't use the filemanager program for that simple fact: it's about as secure as leaving the door open and waving a sign that says "free entrance".

Your best bet is going to be to just use an FTP program.
Yep. Filezilla!

And of course, if you can write the script to use PHP's own file manipulation routines... that works great too.

John
__________________
Proud to be a Surmunity Mod!
XEON PASS60 PASS61
Make a fundamental difference!
My Sites:
Curious about Brewing Beer? Join the community!
>>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax
Get into an Art museum
Victorian London
It's your brain -ON WEB - mybrainhost.com (under development)
What SHOULD Government do? Much Less than it Does!
Bigjohn is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 11th, 2004, 8:51 PM   #8 (permalink)
rocks your socks.
Resident.
 
David's Avatar
 
Joined in Mar 2004
Lives in fear of Obama.
Hosted on Pass 7
13,160 posts
Gave thanks: 8
Thanked 35 times
sometimes i lucky to be able to write my name lol

i've never heard of filezilla...i use WS-FTP Pro
__________________
Quote:
Originally Posted by removed View Post
Internet Explorer rules.
David is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old August 11th, 2004, 9:02 PM   #9 (permalink)
minor deity
Super #1
 
Bigjohn's Avatar
 
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,395 posts
Gave thanks: 28
Thanked 94 times
Quote:
Originally Posted by djsckizo
<snip>
i've never heard of filezilla...i use WS-FTP Pro
I did too... for years... and years... back when it ran on Windows 3.1

But I found Filezilla last year.. The program is FREE and Awesome.

John
(it's a sourceforge project)
__________________
Proud to be a Surmunity Mod!
XEON PASS60 PASS61
Make a fundamental difference!
My Sites:
Curious about Brewing Beer? Join the community!
>>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax
Get into an Art museum
Victorian London
It's your brain -ON WEB - mybrainhost.com (under development)
What SHOULD Government do? Much Less than it Does!
Bigjohn is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On