Folder Permissions (CHMOD 777 -> 755)

[ozanguven]

Hello,

I'm running a forum and a gallery script, so I have some CHMOD 777 directories.

How can I secure them from being attacked by lamers?

If I change the permission users cannot upload images. If I don't change the permissions it is not secure.

Any advices?

Thanks.

[Sarah]

What software is the forum and gallery?

[ozanguven]

phpBB as forum and Coppermine as gallery.

images/avatars/ should be writeable in phpBB
and gallery directory should be writeable in Coppermine.

[Cirtex Admin]

Hi

It really is up to you, to be 100% secure just leave the folders 755.

[ozanguven]

I think you didn't understand the question and my explanations.

I quote from my second message for those who couldn't understand;

images/avatars/ should be writeable in phpBB
and gallery directory should be writeable in Coppermine.

There are tons of websites running those forum and gallery scripts, but they are in safe... Aren't they?

What about setting a cron which deletes all the files other than gif, jpeg, png etc. in the writeable directory?
I'm asking some advices like the cron one.

[Cirtex Admin]

Hi

Those are special cases, so yes you can leave them as 777 permission, but do note that sometimes if the script is outdated, those will pose as security risks as well.

Cheers