Just to prevent hacks, can I remove write protection in all files and directories in my installation, except for in
I mean I want to chmod to 555 and
chown them all to
root:root except for files within
sites/default/files. For installation/uninstallation I use Drush.
I'm talking about the "Config 1: Web server is running as owner" as described as in What are the most appropriate users and permission levels for Drupal sites on shared hosting?
It seems my four sites are working fine with this. Is it OK?
This is because to ward off hack attacks which place php files in within site folders. This almost saved my site from this Highly Critical hack attack but the hacker was able to place php and execute file within sites/default/files as my .httacces was not protected from running php scripts within the files directory.