Re: Re: hacked!!

------------ Original Message ------------ > Date: Saturday, October 04, 2014 13:23:07 -0400 > From: Omega -1911 <1911que@gmail.com> > To: webmaster@jimginer.net > Cc: php-general@lists.php.net > Subject: Re: [PHP] Re: hacked!! > > On Sat, Oct 4, 2014 at 1:04 PM, Jim Giner > <jim.giner@albanyhandball.com> wrote: > >> My files all seem to have a 644 for permissions. My public_html >> (root) folder show attribute of >> >> (using Filezilla) >> >> owner - r/w/e >> group - r/w/e >> public - r/w/e >> >> with a numeric value field showing 'xxx' >> >> My sub-folders of that seem to be different and I don't know why >> that is: >> >> owner - r/w/e >> group - r/e >> public - r/e >> >> with a numeric value of 755. >> >> The public_html settings are apparently(?) disabled since the >> screen shows them in a shaded color. >> >> So - are all of these correct? >> >> > > No. Your public_html folders should not be set r/w/e (777). They > should be like the following: > > owner = 7 .. read, write, execute > group = 5 .. read, execute > public = 5 .. read, execute > > *NOTE - Even the public_html folder should be set at 755. Also, what "user" owns these directories/files? What "user" does the web server that serves them run as? [if they are the same the permissions almost (not totally) moot.] - Richard