Forum Moderators: phranque

Message Too Old, No Replies

security issues of World writeable folders in root

How can hackers gain access to 777 folders?

         

houseofstrauss

5:21 pm on Aug 3, 2005 (gmt 0)

10+ Year Member



I am considering building a website using a poular CMS that uses some 777 folders in the website root. I am aware that various security exploits have been achieved through world writable dir/files and this causes some concern, especially as I will be using a shared server environment.

1- Can you please explain how anyone can gain access to such files/folders, assuming my ftp/logins are secure

2- What remedies can be used to make 777 folders functional but secure?

thank-you.