File Permissions?
| From: | Tedd Sperling | Date: | Wed, 16 Aug 2017 16:02:58 +0000 |
| Subject: | File Permissions? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-326148@lists.php.net to get a copy of this message | ||
Hi Gang:
We had an incident happen at the college where I teach — the IT guy said:
> After further inquiry, it appears a bad guy used a php vulnerability injection over http to
> enter into a folder on CITW. This was made possible because the permissions were misconfigured
> (execute was set to 755 instead of normal 644).
My understanding of permissions is that 755 is normally thought of as secure — is that not true?
My thanks in advance for any clarification or advice.
Thank you,
tedd
_______________
tedd sperling
tedd@sperling.com