Right permissions of FLARUM

davincy

Hi guys, what do you think if we start a topic talking about security guidelines, issues and related questions about permission folders, htaccess and other FAQ's?

davincy

During the installation, I had to give 777 (not 755) permissions to the whole httpdcs folder, maybe this could happen to someone else and if so, it would be fine to restore the permisions after the installation.

@luceos can you guide me about the right permissions to FLARUM?

jordanjay29

Don't ask to start discussions, just start a discussion.

davincy

jordanjay29 I have the doubt that I wrote at second post of this topic, I can change the title if you want just to solve this issue ?

During the installation, I had to give 777 (not 755) permissions to the whole httpdcs folder&files, maybe this could happen to someone else and if so, it would be fine to restore the permisions after the installation.

Currently I'm with all the httpdocs folder with 777 permissions. I'm checking different permission folders just now.

davincy

jordanjay29 Now the topic is "Right permissions of FLARUM".
I wanted it to be useful so that people could report important errors, tips and other bugs. I'm sorry but I still think of this as a forum, not as a support system. The intention was to help and share knowledge so that others can use it like a new FLARUM user as me.

I appreciate if you (or someone) can tell me whats the right permissions of files and folders to run FLARUM

clarkwinkelmann

I've often seen 777s being strongly discouraged. The permissions are just too wide. I believe this should only be the very last resort if the specifics of your hosting really don't allow anything else.

What I usually do for Laravel/Flarum is that I create a dedicated user, then run the webserver with that user and use standard 664 permission for everything. This can also be done with the standard webserver user like www-data for example.

Kulga

See this issue about correct permissions in flarum
flarum/core890

luceos

davincy you mentioned you are running an ecommerce site next to flarum and you have folder/file permissions of 777. If either of these sites get hacked (although with Flarum I think that would be pretty unlikely just yet), both of your sites will be hijacked.