How is doing this seen as a good idea? I understand that installing an extension means various files are put in different possibly unknown locations and the only way to catch each one is to open up everywhere to being writeable. But does that not just spell out bad security?!
It would mean providing full writeable access to the htaccess, and other important files.
I could be wrong, but I always believed permissions were there to provide security and limit “permission” of access/modifying of files and setting the entire directory to writeable by all (or apache which is as good as all) voids that level of security. Can someone explain to me that I am wrong please?
OK just found the Wiki you updated Crucial, so there is a way that isn’t a horrible 777 on everything, but why is the method in the Wiki not the suggested way when you run Magento Connect??
As Luke correctly remarks, with setting the permission of all folders to 777, wouldn’t that compromise the system’s vulnerability?
This is an old thread, so it deserves a new reply for first-time readers (I’ve updated my original reply in here as well):
If you’re receiving permissions errors in Magento Connect, it most likely means PHP is running as an Apache module. You must use SSH to upgrade Magento or install (some) extensions:
To install an extension:
./pear install EXTENSION-KEY
Replace EXTENSION-KEY with the name of the extension you’re trying to install.