Posted by Al on 07/25/05 16:51

I'm on virtual-host server and have been following a rule of making certain all directories on the
root have permissions set to 755. This is the default when creating new directories with ftp, etc.

Occasionally, I need directories with 757 and have always made certain they were not on the root.

I've started thinking about whether my rule really makes any sense for security reasons.

In general, the site is well protected by the host's security measures and my use of the Apache
basic authorization where needed, etc.

Comments and suggestions???

Thanks.....

[Back to original message]