Page 1 of 1

1.06 Post-Install: Important Security Questions

Posted: Thu Apr 26, 2007 10:20 pm
by lanesharon
Installation tells me to:
      - chmod 777 tmp/templates_c
- chmod 777 tmp/cache
- chmod 777 uploads
- chmod 777 uploads/images
- chmod 777 modules (to install modules via admin)

1. Can I change the modules directory to 775, since I would be the only one uploading modules?  Can any of the other directories also be changed?

2. Can I password protect the admin directory?

3. Which directories are 'dynamic' and need to be backed up at differrent intervals?

BTW - Great install instructions and routines!  

Re: 1.06 Post-Install: Important Security Questions

Posted: Fri Apr 27, 2007 5:11 am
by cyberman
lanesharon wrote: 1. Can I change the modules directory to 775, since I would be the only one uploading modules?  Can any of the other directories also be changed?
You have to try it out - this (and lower values) are depending on some server defaults.
2. Can I password protect the admin directory?
Think so, if you can live with needed double login (haven't tried yet).
3. Which directories are 'dynamic' and need to be backed up at differrent intervals?
Most/all is stored in database so only database needs a backup.

Re: 1.06 Post-Install: Important Security Questions

Posted: Fri Apr 27, 2007 10:42 am
by Pierre M.
cyberman wrote: ... only database needs a backup.
May be the uploads folder too.
Pierre M.