Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

File permissions for setup wizard
 
Jaace
Jr. Member
 
Total Posts:  2
Joined:  2010-10-23
 

In the instructions Step 2—Set file permissions for the Setup Wizard, it states that these files and directories should be set to 777. This seems like a gaping security issue and the files come downloaded already with the following permissions:

755 - /var
644 - /var/.htaccess
755 - /app/etc
755 - all directories under /media

I’ve run an install already and it seemed to go alright, but I don’t want to run into any issues in the future because I didn’t set all of the above to 777.

I’m using mod_php and it looks like here, that those permissions I stated above match what the chmod would do...so I may have just answered my own question. I just wanted some feedback to double-check as this is my first time really installing and using Magento fully.

 
Magento Community Magento Community
Magento Community
Magento Community
 
elspood
Magento Team
 
Total Posts:  22
Joined:  2012-05-01
Magento
 

Yes, you are correct that setting these permissions on these directories is unsafe. I will confirm whether the setup wizard install guide is still correct and have the documentation updated accordingly.

Thanks for pointing this out!

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top