Softaculous

Topic : MyBB 1.6 Installation settings.php not correctly CMOD

Posted By: Zash on August 13, 2010, 1:56 am

Hey,

When installing MyBB 1.6, /inc/settings.php should be CHMOD 777, however it is left at 644.

Posted By: alons on August 13, 2010, 4:45 am | Post: 1

settings.php is configured by Softaculous and then secured by making its permission as 0644
If left at 0777 it could be tampered with sir.

-----------------------
For immediate support please email us at our Support email address. PMs sent to any Softaculous Team member or posting in the forums is not the official way to get support.

Virtualizor - The Next Generation VPS Panel
Webuzo - It is Softaculous Standalone for Enterprises, SMB, Developers. Deploy it on Dedicated Servers, VPS, Virtual Appliances or the Cloud
Pinguzo - Server and Domain Monitoring tool
PopularFX - Marketplace of WordPress, Drupal, Joomla, Bootstrap themes
Remote Installer - Use Softaculous over FTP/FTPS/SFTP

Posted By: Zash on August 13, 2010, 4:33 pm | Post: 2

Actually, the settings.php is supposed to always be CHMOD 777 (other's you couldn't do anything in the admin CP). Your logic makes sense for config.php, which you should turn back to 644, but not settings.php

Posted By: alons on August 14, 2010, 9:45 am | Post: 3

settings.php or infact any php file that in included inside a RUNNING PHP script can do anything with the script and access any information.
settings.php has important data like config.php and is necessary to be secured.
Moreover settings.php is configured by Softaculous for site information during installation.

-----------------------
For immediate support please email us at our Support email address. PMs sent to any Softaculous Team member or posting in the forums is not the official way to get support.

Virtualizor - The Next Generation VPS Panel
Webuzo - It is Softaculous Standalone for Enterprises, SMB, Developers. Deploy it on Dedicated Servers, VPS, Virtual Appliances or the Cloud
Pinguzo - Server and Domain Monitoring tool
PopularFX - Marketplace of WordPress, Drupal, Joomla, Bootstrap themes
Remote Installer - Use Softaculous over FTP/FTPS/SFTP

Posted By: Zash on August 14, 2010, 3:32 pm | Post: 4

Maybe that would make sense AFTER you have already configured your forum.

However, after a default installation 99.99% of people usually change around all of their settings. And to do that, you need to CHMOD settings.php 777. AFTER that, you can CHMOD it back to 644. But when just installed it should be 777. Even the MyBB Installation Wizard recommends it be that.