Web site folder permissions

[Peggaweng]

Hi all,

Now I know this is a pretty basic question but I am going to ask anyway… What should the permissions be on website folders? /Library/WebServer/Documents

Now the reason I ask,

I have got the perms as root:admin and drwxr-xr-x. With these perms I can Do apple+k, type the url of the servers site and mount the site folder from anywhere i like. Surely this cant be right?

I would really appreciate some help here.

Many thanks

Gary.

[semiotica]

WebServer should be

drwxrwxr-x root admin

as should CGI-Executables and Documents.

contents of the web folder(Documents) , i.e html files should be
-rw-rw-r– root admin

all other files, eg jsp, php should live above the web folder (documents) and have permisions as required.

The best way of managing web sites however is to add a new user for each web site and se that users home Sites directory, keep WebServer for error pages and other server specific files.

[Author]

Posts