Re: which rights to set for dirs containing uploaded files?
| From: | Matt Schroebel | Date: | Sun, 10 Mar 2002 17:50:14 +0000 |
| Subject: | Re: which rights to set for dirs containing uploaded files? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-87916@lists.php.net to get a copy of this message | ||
----- Original Message -----
From: "Andy" <news.letters@gmx.de>
Subject: [PHP] which rights to set for dirs containing uploaded files?
> I am wondering which right I should set for a directory where users can
> upload pictures. What would be a secure way? Currenly I did set the rights
> to 777 which allows everything. This seams verry insecure to me. But
> otherwise php can't store the file.
You can also set the owner of the directory to nobody:nobody and give write
auth to user and group but not other. That probably wouldn't make any
security difference on a dedicated server, but would on a shared box.