777 permission

[php_guest]

I am using sharing hosting and I am using FCKeditor. The problem is that uploading images works only if I set permission of folder userimages to 777. Is that save, is there any risk that anybody will delete images? Is possible that users delete images from this folder?

 

thank you

[corbin]

Unless Apache is running as specific users (using something like suphp) then you don't really have any options.

 

 

Yes, theoretically if a base directory is not set for the other users (and it should be!) then they will be able to tamper with 777 folders.

 

 

 

An easy way to test it would be to just do something like this:

 

 

(This would be in the highest folder you can go.)

<?php

$dir = opendir('../');
if(!$dir) {
    echo 'Could not open dir!';
}
else {
    echo readdir($dir) . "<br>";
}