777 permissions?

gwmbox

2008-07-22 03:43

Can someone tell me why it all has to be 777 for file permissions? Surely this is a security issue? Also the config folder and files as 777 - why? Again surely a security issue here, especially as the login details are in plain text.

Like to hear what others have to say about this.

Thanks

» Quick.Cart v3.x

rustam

2008-07-23 21:15

Config file contains parameters that can be changed from admin page. I would consider developers moving those parameters to separate "settings" file, while base config options remain in config.php with 644 permissions.

gwmbox

2008-07-28 05:34

Glad I am not the only one thinking that this system needs a bit of security tightening - just to be safe :)