Jump to content

Permissions: Should I follow wiki or installation screen? (URGENT)


Recommended Posts

An important question:

In PrestaShop 1.2.2, the installation screen that shows the green check-marks on what permissions have been set, says something different to what the wiki (http://www.prestashop.com/wiki/Installing_And_Updating_PrestaShop_Software/) does.

In the installation screen, some folders also need recursive permissions, while in the wiki it says they dont.

What should I follow? The wiki, or the installation screen?

Thanks!

Link to comment
Share on other sites

ah cool
another question about this, in the installer it says:

Write permissions on files and folders:
/config
/tools/smarty/compile
/sitemap.xml

Write permissions on folders and subfolders/recursively:
/img
/mails
/modules
/themes/prestashop/lang
/translations
/upload
/download

my question is - does the first thing mean to apply the 777 permissions to the directory only, or also the files? because it says: "on files and folders", so recursively into the file, but not subfolders?

do u get what i mean?

if i set something up wrong here, like, i just set the permissions for the first group of things to both the directory and the files in it, can that be harmful in any way? cause problems?

Link to comment
Share on other sites

hmm, are you sure? because cant that cause some security threats to the store?

because i presume that config is an important dir?

im not really sure about WHAT (in simple terms) the 777 permissions are... like, who the ppl who can write/read etc. are, but ye... :P so maybe tahts why im asking that..

Link to comment
Share on other sites

yes I am sure, however after installing presta - go to config dir and reestablish the rights - 755 for intance

the config dir is needed for the installation of presta - here will be config files for database, smarty, shop

/tools/smarty/compile will hold the template files - if it's not empty it's wise to give a recursive 777
---------------------------------------------


usually giving 777 on a shared server is not recommended but that may be the only way of getting this written by apache which often runs as user nobody

you can try to see if 770 works for you for config dir - if not give it 777 and reverse to 755 after install

Link to comment
Share on other sites

http://www.prestashop.com/forums/viewthread/27253/ is not related to permission issues. It's just that the new theme has a file or more missing. If the theme is for 1.1 try to turn on from preferences v1.1 theme compatibility = Yes


regarding 777 - an attacker MIGHT upload a file there if you have a security issue in your web application (prestashop for instance) - but this attacks are not trivial and depend on some factors. So if you have a dir chmod-ed to 777 doesn't mean you'll be hacked

shared server? http://en.wikipedia.org/wiki/Shared_web_hosting_service
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...