Dead Links…can’t get to any blog entry’s page…

Because if you leave it 777, anyone just “happening by” with a program that can view everything on the server (unfortunately there ARE programs readily available that can do just that) can access the file and do stuff you DO NOT want happening….

In general, you should NEVER leave 777 any file or folder on your server space. Folders should be 755, files 644. It’s safer….

I see. Well, I believe I set my uploads folder to 777 so that I could upload stuff. Should I change that, in which case, is it still possible to upload stuff through the interface? Is there a permission that will allow writing but not deleting or editing?

I haven’t got a permission like that on my servers, no. Seems as if it’s all or nothing. I also think (though I don’t do uploads much if at all) that whatever folder you put them in will have to be 777; I *think* you could upload through ftp, and link normally from a post – but that’s more work than most people want to do, even for safety.

It’s a conundrum without a current solution AFAIK. I have one client who insisted on the uploads folder, and the use of performancing in firefox, in order to make it simple. So it’s set at 777, and I made her sign a clause in the contract that if she got hacked through it, she had been fully warned about potential consequences, AND that cleanup of a problem of that nature would be extra…. so far it’s been okay, but I feel like it’s an accident looking for a place to happen.

Yes, I’d much prefer to do it through the webform. I know that’s possible to do securely, tons of sites like Newgrounds have ways to upload stuff securely. If I ever get on someone’s bad site, maybe I’ll change the permissions :-/

Thanks