I did not see any documentation on the choice of system userid to be the owner of the web area Drupal is installed in. Is it safe (secure) to have the same userid the web server runs as be the owner of everything there? Or should a different userid be used?

Comments

yelvington’s picture

No. The webserver should own the contents of the files directory but that's all.