Loading


Advertisement:

Author Topic: Profile Pic Folder Permision  (Read 294 times)

BRYAN

  • Jr. Member
  • **
  • Posts: 57
  • Beef Ruins Yet Another Nation
Profile Pic Folder Permision
« on: February 20, 2017, 12:18:28 am »
Can anyone help me, I got that Profile Pic plugin and if i have images folder set to 775 which is writable it tells me i need to put 777 cause the folder is not writable, i know 777 is not secure is there a way to have it working with 775 not 777. thanks a lot, I understand it's just a pic folder but i still believe 777 is not secure and 775 is better.

BritWeb

  • Sr. Member
  • ****
  • Posts: 356
  • If it ain't broke, don't fix it.
Re: Profile Pic Folder Permision
« Reply #1 on: February 20, 2017, 09:58:23 am »
CHMOD 775 is more than adequate and make sure Apache user and its group have full read and write permissions to that folder.

Regards

Aficionado

  • Hero Member
  • *****
  • Posts: 4076
  • Good things come to those who wait
Re: Profile Pic Folder Permision
« Reply #2 on: February 20, 2017, 12:51:23 pm »
Can anyone help me, I got that Profile Pic plugin and if i have images folder set to 775 which is writable it tells me i need to put 777 cause the folder is not writable, i know 777 is not secure is there a way to have it working with 775 not 777. thanks a lot, I understand it's just a pic folder but i still believe 777 is not secure and 775 is better.

644 for files and 755 for folders. That is needed. I dunno why ignorent people keep speading information about 777 and 775. Apparently they have no idea what they are talking about.

644 and 755 is all you need. If that doesn't work, then you will have other problems also. Ask your hosting provider or find a new and good one.


BritWeb

  • Sr. Member
  • ****
  • Posts: 356
  • If it ain't broke, don't fix it.
Re: Profile Pic Folder Permision
« Reply #3 on: February 20, 2017, 11:34:48 pm »
CHMOD 775 is more than adequate and make sure Apache user and its group have full read and write permissions to that folder.

Regards

Just a correction, BRYAN, I meant to say CHMOD 755 for that folder; it was a typo

Folder permission: 755 (drwxr-xr-x)
File permission: 644 (-rw-r--r--)

If you relax these permissions, you run the risk of getting hacked, obviously. If you are using shared hosting they would have set it up like this anyway.

Regards

BRYAN

  • Jr. Member
  • **
  • Posts: 57
  • Beef Ruins Yet Another Nation
Re: Profile Pic Folder Permision
« Reply #4 on: February 20, 2017, 11:44:40 pm »
ok server is set correctly cause everything works as it should, apache and group own it, all my files are 644 and upload folders 775 and other folders 755 all plugins and everything is fine, other upload folders in other plugins work fine as well, i dont have one 777 folder nor i want to, but there is this line in profile pic plugin in index.php

Code: [Select]
// Check if we can upload to the specified path, if not inform the user.
if(!is_writable($upload_path)) {
echo __("You cannot upload to the specified directory, please CHMOD it to 777", "profile_pic");
return;
}

if i remove this line plugin works correctly with 775 and im all set, but wanted to know is there a fix so i keep this line and still have it working.

and thank you both for helping me.
« Last Edit: February 20, 2017, 11:47:33 pm by BRYAN »

Aficionado

  • Hero Member
  • *****
  • Posts: 4076
  • Good things come to those who wait
Re: Profile Pic Folder Permision
« Reply #5 on: February 21, 2017, 12:08:22 am »
I woudn't trust the plugin author, suggesting 777 for anything. I would remove the plugin, in a sec.

I have no idea who he is, but i can assure you 755 is enough for everything in ALL scripts (Osclass or Wordpress or whatever).


BRYAN

  • Jr. Member
  • **
  • Posts: 57
  • Beef Ruins Yet Another Nation
Re: Profile Pic Folder Permision
« Reply #6 on: February 21, 2017, 02:17:07 am »
its a known osc plugin http://forums.osclass.org/plugins/(new-plugin)-upload-profile-picture/ it is one page plugin, whery simple one, just that small issue

dev101

  • Osclass Hero
  • Hero Member
  • *
  • Posts: 1570
  • osclass.work
Re: Profile Pic Folder Permision
« Reply #7 on: February 21, 2017, 03:39:43 am »
Hi BRYAN,

check that your apache user has write permissions and ownership of that dir, if you run PHP as apache module, it should work, but if not, you PHP process might not have write perms into that dir. Check your users, if you are on VPS/Dedi. Also, check that plugin's $upload_path path is correct (I mean, this is highly unlikely, but wrong path / non-existing dir can also return this message).

Regards