By Repgahroll on

Hello.

I installed Drupal on Sourceforge sucessfully, however, after the installation, when i changed "files" folder permissions to 775, Drupal says such folder isn't writable, if i set permission to 777 everything works flawlessly.

The problem looks like relative to "files" (folder) group, which should be apache, however, i don't have permission to change the group to other than my own group.

Is there any workaround other than setting "files" to 777?

Thank you very much.

⋅ Categories: Drupal 6.x

Comments

vm’s picture

vm commented

have sourceforge change the permissions or group permissions on their end?

Repgahroll’s picture

Repgahroll commented

Sorry man... i didn't understand what you mean.

vm’s picture

vm commented

uh ... contact the host (sourceforge support?) and have them change the permissions to what you want so that you don't have to use 777?

Though I don't really see an issue with using 777 for the files folder in most cases.

Repgahroll’s picture

Repgahroll commented

I already contacted them and it's not possible to change the group of my files/folders to other than my own.

Is it secure to use 777? It's not my private host, i think anyone who has an (sf) account will be able to see and modify this folder, right???

vm’s picture

vm commented

i think anyone who has an (sf) account will be able to see and modify this folder, right???

erm, not to the best of my knowledge, unless your entire account is set to 777, which I'd highly doubt it is. I'd have to assume that there are others on the server that allow uploads. Can you see their folders which, based on the above would have to be set to 777?

If sourceforge doesn't allow 755 or 775 then 777 is your only option and there is no way to 'workaround' that on the sever where it would concern drupal as its a server level setting that is obviously controlled by your host.

Repgahroll’s picture

Repgahroll commented

OK, assuming that 777 isn't secure, what is the worst thing that can happen?

Repgahroll’s picture

Repgahroll commented

Can someone tell me what's the risk of having 777 permission in this case?

vm’s picture

vm commented

There may be no risk involved depending on how the server is set up. On another hand it can depend on how someone may exploit the server or your specific account on the server.

As this isn't a drupal specific issue, asking the host is the best advice I have. They understand exactly how their set up is and are responsible for forcing 777 as they don't allow 775 or 755