permissions of uploaded files too loose

Where do I set the default permissions for uploaded images ?

They are landing as read/write by user/group/other which is far to open - anyone with an account on the machine can much with anyone elses images ...

I'd prefer the files landed with the umask/permission of the server process and writeable by all.

Thank you!

Comments

  • gjunk Member
    I wrote: and writeable by all.

    but of course I meant:

    and NOT writable by all ...

    gene
  • Setup allows you to set general permissions. If those are not correct for a particular folder you would need to use FTP to set for that folder.
  • gjunk Member
    The folder permissions were fine ... however when I use zen to upload an image it arrived in the folder with

    rwx-rwx-rwx

    permissions.... ie anyone can read/write the image file ...
  • What are the permissions you selected from Setup?
  • gjunk Member
    I believe at install time it was "Strict".

    Where do I check the current setting do you know ? Is it file or database ?
  • Simplest way is to run setup again and see what it says. Or you can look in the zp-copnfig.php file in zp-core. If the setting was strict then any file tha zenphoto uploaded/ceated would have strict permissions.
  • gjunk Member
    There is no zp-config.php file - only zp-config.php.source

    There is zp-data/zp-config.php

    But it doesn't have any obvious reference to any settings one way or the other.

    I just ran setup again: It indeed shows permissions as 'strict = 0755'

    File/Folder Permissions [are strict (0755)]

    gene/
Sign In or Register to comment.