Page 1 of 1

Does CHmod 777 cause any security issues when used in msg

Posted: Thu Mar 29, 2007 3:35 pm
by itshotlink
Script URL:
Version of script:
Hosting company:
URL of phpinfo.php:
URL of session_test.php:
What terms did you try when SEARCHING for a solution:

Write your message below:

I'm just a bit worried about Chmod 777 in general...
and am wondering if there are any security issues with using it on the msg folder...
and is there an alternative (functional)

Posted: Thu Mar 29, 2007 5:31 pm
by Klemen
Good question. Chmod 777 is also called "world writable" which gives a false impression that anyone in the world can write to that folder.

In fact only files on YOUR SERVER can write to a chmod 777 folder. A script could write to this folder/overwrite files but ONLY if it is located on your server.

So a folder with chmod 777 could be considered a minor security risk only if you had any harmful files (scripts) already on your server. But even then the only thing that harmful script could do is write to or delete stuff inside the 777 folder and not touch anything outside it.

Hope this clears up things.

And no, there are no alternatives I know of, you need a folder chmod to 777 if you want PHP to be able to store files inside.

..And..Thanks for the Education..

Posted: Fri Mar 30, 2007 2:08 am
by itshotlink
Thank you ...That was ther answer I was hoping for..easly repaired if indeed it did happen...Except it came from an internal bug..eatting elsewhere too...

In the event you come back to this post..Thanks for the Education from your toturials too..I mean that with all sincerity...