1.06 Post-Install: Important Security Questions

Help with getting the CMS CORE package up and running. This does not include 3rd party modules, PHP scripts, anything downloaded via module manager or from any external source.
Locked
lanesharon

1.06 Post-Install: Important Security Questions

Post by lanesharon »

Installation tells me to:
      - chmod 777 tmp/templates_c
- chmod 777 tmp/cache
- chmod 777 uploads
- chmod 777 uploads/images
- chmod 777 modules (to install modules via admin)

1. Can I change the modules directory to 775, since I would be the only one uploading modules?  Can any of the other directories also be changed?

2. Can I password protect the admin directory?

3. Which directories are 'dynamic' and need to be backed up at differrent intervals?

BTW - Great install instructions and routines!  
cyberman

Re: 1.06 Post-Install: Important Security Questions

Post by cyberman »

lanesharon wrote: 1. Can I change the modules directory to 775, since I would be the only one uploading modules?  Can any of the other directories also be changed?
You have to try it out - this (and lower values) are depending on some server defaults.
2. Can I password protect the admin directory?
Think so, if you can live with needed double login (haven't tried yet).
3. Which directories are 'dynamic' and need to be backed up at differrent intervals?
Most/all is stored in database so only database needs a backup.
Pierre M.

Re: 1.06 Post-Install: Important Security Questions

Post by Pierre M. »

cyberman wrote: ... only database needs a backup.
May be the uploads folder too.
Pierre M.
Locked

Return to “[locked] Installation, Setup and Upgrade”