Page 1 of 1

File attachment requires chmod 777?

Posted: 07 Dec 2017, 17:45
by Starbuck
With 2.8.0 I was getting the error 505 until I finally changed the perms of my attachments folder to 777.
I don't think that's safe but I'm open to correction.

I can put the folder outside of the web space:
/var/www/tracker/attachments
rather than inside web space where it's open to the public:
/var/www/html/tracker/attachments

But that still leaves a folder with 777 permissions, which I don't think is secure.

1) Why won't 764 work?
2) What is the safest permission and location for uploaded data?

Thanks.