General Discussions

**mikesilvia** · 05-11-2006, 02:36 AM

Ok, I always see "and CHMOD the file." I understand there is a code and each code means a specific permission regarding write protecting. Anyone have a handy cheat sheet? I use Plesk control panel and no where can I set a CHMOD 777 or what ever the numbers mean. I can set write protect, etc.

Thanks in advance!

Mike

**Nintendo** · 05-11-2006, 02:40 AM

http://javascriptkit.com/script/script2/chmodcal.shtml

ftp programs usually let you set the permission.

**TheNewYorkNOC** · 05-12-2006, 08:05 AM

When you are using the chmod command, they are referring to it being done when logged in through SSH.

Example command:

chmod 755 index.html

**Anacrusis** · 05-12-2006, 08:18 AM

Here's a good description of what the numbers mean:
http://www.redhat.com/docs/manuals/l...-chmodnum.html

The 3 numbers refer to permissions, the first one is the owners permission, the seconed number is the group, and the third is everybody else (world).

A permission setting of 777 means that everybody (user, group, world) can read, write and execute the file.
A permission of 664 means that user and group can read and write, but world can only read the file.

**ibbo** · 05-16-2006, 11:27 AM

Which should make you go EEEEEEEEEEK when someone is setting perms to 755 or above.

A quick bit of advice then is to totally avoid 0777 permisions which renders your file or directory world readable. This permision WILL land you in trouble when somebody exploits it (WHICH they will).

The 0777 exploit allows folks to drop (via ftp or whatever) malicious files onto your web space. Then they will modify your pages and start making lots of system calls (normally they are looking at server specs and holes on the server to exploit, BUT this does not mean they wont exploit you if possible).

0664 is adequate, another trick is to use chgrp instead of changing the fp bits.

0777 renders any file an executable and in the world of the web its a dangerous thing to be.

Ibbo