在虛擬主機中的各目錄和檔權限該如何設？

[哈啦]

就以phpbb論壇來說，admin目錄的權限該設成多少？
其他的目錄和檔案最好設多少才比較安全？

謝謝先。

[seesawgame]

哈大
先Check phpbb安裝時的檔案要求再來修正檔案權限
因為有些檔案必須還是要有一定的權限的

[哈啦]

先Check phpbb安裝時的檔案要求再來修正檔案權限


請問在哪裡能看到各檔「應有」的權限要求？

[dx2]

Decompress the phpBB 2 archive to a local directory on your system.
Upload all the files contained in this archive (retaining the directory structure) to a web accessible directory on your server or hosting account.
Change the permissions on config.php to be writeable by all (666 or -rw-rw-rw- within your FTP Client)
Using your web browser visit the location you placed phpBB 2 with the addition of install/install.php, e.g. http://www.mydomain.com/phpBB2/install/install.php, http://www.mydomain.com/forum/install/install.php etc.
Fill out all the requested information and hit Submit
Change the permissions on config.php to be writeable only by yourself (644 or -rw-r--r-- within your FTP Client) Click the Complete Installation button or revisit the location you entered above.
phpBB 2 should now be available, please MAKE SURE you read at least Section 8 below for important, security related post-installation instructions.

Once you have succssfully installed phpBB 2.0.13 you MUST ensure you remove the entire install/ and contrib/ directories. Leaving these in place is a very serious potential security issue which may lead to deletion or alteration of files, etc. Please note that until these directories are remove phpBB2 will not operate and a warning message will be displayed. Beyond these essential deletions you may also wish to delete the docs/ directories if you wish.

With these directories deleted you should proceed to the administration panel.Depending on how the installation completed you may have been directed there automatically. If not, login as the administrator you specified during install/upgrade and click the "Administration Panel" link at the bottom of any page. Ensure that details specified in General -> Configuration are correct!

[cool]

phpbb 的admin 安裝預設是在755
755檔案(目錄夾)權限怎會如此輕易被刪?? 又不是全開(777) ~what

稍後補圖

[seesawgame]

在下載回來的檔案應該會有readme.txt的說明
或是安裝說明的檔案

[cool]

檔案權限設定,可用如:CuteFtp軟體登入主機
可查看及修正檔案權限

http://100.to/files.gif

※過往曾碰過"目錄及檔案權限"自動變換經驗.因主機不當調動.
將目錄夾由原使用戶預設644 or 755 全換為777 (全開)

777全開是最危險狀態

[dx2]

在docs裡有文件
改檔案或目錄權限可透過cpanel或ftp軟體

[cool]

其他的目錄和檔案最好設多少才比較安全？


一般論壇目錄夾以設755為主 (安全性)
檔案為644

個人習慣會將這些開放套裝程式.將原預設管理目錄名稱重新更改過.
免去讓人輕易猜到admin目錄位置

ps:需要讓使用上傳檔案.目錄夾是需開放在777
目錄夾在777的權限下.儘可能不放.php這些程式