Mobile app version of vmapp.org
Login or Join
Jessie594

: How to set permissions for DooPHP? I have downloaded and installed DooPHP according the Installation instructions. However, there is no statement on how to set permissions. Also not in INSTALL.TXT

@Jessie594

Posted in: #Php #Security

I have downloaded and installed DooPHP according the Installation instructions. However, there is no statement on how to set permissions. Also not in INSTALL.TXT which comes with the product.

The folder structure reveals a protected folder under app which contains the config files, which should probably be secured.

By default, the folder and subfolders have 755 and files have 644 permissions. Owner is root:root, but I have changed that to www-data:www-data to make the Model Generator work.

What would be considered safe permission settings for dooPHP? I'd like to find that out before I go live with it.

I already tried to find advice in the DooPHP forum, but all I found is a statement about missing security settings from 2011.

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Jessie594

1 Comments

Sorted by latest first Latest Oldest Best

 

@Megan663

I don't see anything in their configuration that prevents somebody browsing into that protected folder. You could add configuration to the .htaccess file to prevent access to it:

<Directory /app/protected>
Order deny,allow
Deny from all
</Directory>

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme