Upload folder structure defaults to full write (777) permissions
-
I am using an upload field for user photos, and I found that the folder structure is being set to full write permissions. This seems like an unnecessarily loose permission setting that could be tightened per security concerns.
I manually set the default to 755 for folders (644 for files), and everything appears to function normally. The cimy_manage_upload function (in city_uef_functions.php) checks for FS_CHMOD_DIR & FS_CHMOD_FILE having been defined, but I figure the default might as well be tighter unless otherwise needed to be looser (at which point FS_CHMOD_* can be utilized).
Thanks!
https://www.ads-software.com/extend/plugins/cimy-user-extra-fields/
- The topic ‘Upload folder structure defaults to full write (777) permissions’ is closed to new replies.