Possible Duplicate:
What are the recommended directory permissions?

I have recently installed a site on a debian LAMP server. I've finally got to work by changing the permissions to -

/sites - 755

/sites/all - 755

/sites /default - 755

/sites /files -777

/sites /default/settings.php -755

/private -777

/public -777

/sites /files/tmp -777

However, i am unsure if these are the correct permissions to use and they don't create any vulnerabilities.

Thanks in advance.


1 Answer 1


This is all subjective to your situation, but...

If you're the sole developer on the site then you just need to make sure that your Apache user's group has write access to your files directories (or any other directories where files are uploaded or generated. That way both you and apache can access those files using 775 mode.

If you uploaded all of the directories as a user with a primary group that apache is not in, you are better off changing the group to one that apache is in and keeping 775 rather than granting 777 permission.-

If you're on a shared hosting, in some cases group write permission on files is dangerous, so don't do the above in that situation.

Not the answer you're looking for? Browse other questions tagged or ask your own question.