Forum Moderators: phranque

Message Too Old, No Replies

CHMOD Everyone to Write

Is this dangerious?

         

ntbgl

7:33 am on Jul 6, 2008 (gmt 0)

10+ Year Member



I noticed a PHP script using fopen to create a file on my server will not work unless I change the CHMOD from "644" to "646" allowing "everyone" to write to the file.

Will this allow any website visitor to write to these files, or will it allow only for people logged in to the server using my site's username and password to write to these files?

vincevincevince

8:04 am on Jul 6, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It will allow anyone with access to the server to write to the file. This means users of your FTP details, other users of a shared server if they can figure out the path to your file, and any script or program which resides anywhere on that server.

Browser-based visitors will not be able to write to the file.