permissions

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
spartan7
Forum Commoner
Posts: 29
Joined: Sun Jun 19, 2005 12:09 am

permissions

Post by spartan7 »

Hi

I've built a CMS ... I need to be able to upload images, however for that to happen, I need to cmod the images directory 777 no? What type of danger am I opening myself to if I keep the directory open with those sort of permissions?

If I FTP I can set the folder permissions, from php the cmod function does nothing. Any suggestions for how I can allow uploading without keeping a folder open with 777 permissions?
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

have PHP FTP the file to itself.
Post Reply