ZenphotoCMS Forum
permissions of uploaded files too loose - Printable Version

+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: permissions of uploaded files too loose (/thread-7030.html)



permissions of uploaded files too loose - gjunk - 2010-05-11

Where do I set the default permissions for uploaded images ?

They are landing as read/write by user/group/other which is far to open - anyone with an account on the machine can much with anyone elses images ...

I'd prefer the files landed with the umask/permission of the server process and writeable by all.

Thank you!




permissions of uploaded files too loose - gjunk - 2010-05-11

I wrote: and writeable by all.

but of course I meant:

     and NOT writable by all ...

gene




permissions of uploaded files too loose - sbillard - 2010-05-11

Setup allows you to set general permissions. If those are not correct for a particular folder you would need to use FTP to set for that folder.




permissions of uploaded files too loose - gjunk - 2010-05-11

The folder permissions were fine ... however when I use zen to upload an image it arrived in the folder with

rwx-rwx-rwx

permissions.... ie anyone can read/write the image file ...




permissions of uploaded files too loose - sbillard - 2010-05-11

What are the permissions you selected from Setup?




permissions of uploaded files too loose - gjunk - 2010-05-12

I believe at install time it was "Strict".

Where do I check the current setting do you know ? Is it file or database ?




permissions of uploaded files too loose - sbillard - 2010-05-12

Simplest way is to run setup again and see what it says. Or you can look in the zp-copnfig.php file in zp-core. If the setting was strict then any file tha zenphoto uploaded/ceated would have strict permissions.




permissions of uploaded files too loose - gjunk - 2010-05-12

There is no zp-config.php file - only zp-config.php.source

There is zp-data/zp-config.php

But it doesn't have any obvious reference to any settings one way or the other.

I just ran setup again: It indeed shows permissions as 'strict = 0755'

File/Folder Permissions [are strict (0755)]

gene/