Joomla! Discussion Forums



It is currently Fri Nov 27, 2009 7:52 am (All times are UTC )

 


Forum rules

Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: rights folder and files
Posted: Mon Nov 02, 2009 9:47 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Jul 12, 2009 6:03 pm
Posts: 27
Hi

the last night, someone or something tried to attack my web.

I think that he change the rights of my files and folders. Now all files and folders has 755 right. is correct or is dangerous? :eek:

is possible that anyone changes my rights??

_________________
Regards


Top
  E-mail  
 
Posted: Tue Nov 03, 2009 3:58 am 
User avatar
Joomla! Guru
Joomla! Guru
Offline

Joined: Sat Oct 21, 2006 10:20 pm
Posts: 733
Location: Wisconsin USA
Files should be 644
Folders should be 755

Please review the Security Checklist http://docs.joomla.org/Category:Security_Checklist
for more information.

_________________
Phil


Top
   
 
Posted: Tue Nov 03, 2009 10:54 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Jul 12, 2009 6:03 pm
Posts: 27
ok, but if I have thousands files and folders how I can change these rights?? Because I can not select manually....I can die doing it....

_________________
Regards


Top
  E-mail  
 
Posted: Tue Nov 03, 2009 2:32 pm 
User avatar
Joomla! Ace
Joomla! Ace
Offline

Joined: Tue Sep 06, 2005 11:18 am
Posts: 1120
Location: Germany
in your web root folder:

find -type d -exec chmod 755 {} \;

and for files replace the d with f and the 755 with 644 and you are done

_________________
MCITP - Microsoft Certified IT Professional
CCNA - Cisco Certfied Network Administrator
LPI - Linux Professional
PN for Online Transcript ID Check
http://www.mindset.de


Top
  E-mail  
 
Posted: Tue Nov 03, 2009 3:33 pm 
User avatar
Joomla! Guru
Joomla! Guru
Offline

Joined: Sat Oct 21, 2006 10:20 pm
Posts: 733
Location: Wisconsin USA
fw116 wrote:
in your web root folder:

find -type d -exec chmod 755 {} \;

and for files replace the d with f and the 755 with 644 and you are done


This can also be run from a shell prompt using putty if you have shell access for your account. some do and some don't have this access. Some hosts change the find command to something else so their find command would be something to the effect of abcfind instead of just find. Ask support if you are not sure what the command is for their servers.

You can also ask your hosts support to do this permission change for you and they will run the commands.

_________________
Phil


Top
   
 
Posted: Tue Nov 03, 2009 4:28 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Jul 12, 2009 6:03 pm
Posts: 27
Hi

I can not do this from my Web Panel

If I do it from FileZilla, after I'll do problems running joomla? IO have seen that Filezilla have option to apply right to files & folders, only files or only folders...

I have a explorer joomla component (extplorer) but I havent seen this option

_________________
Regards


Top
  E-mail  
 
Posted: Tue Nov 03, 2009 6:15 pm 
User avatar
Joomla! Ace
Joomla! Ace
Offline

Joined: Tue Jun 09, 2009 2:21 am
Posts: 1265
Location: WV
If nothing else works, upload this as permfix.php:
Code:
<?php
echo shell_exec( 'find -type d -exec chmod 755 {}\;' );
echo shell_exec( 'find -type f -exec chmod 644 {}\;' );
?>

and visit permfix.php in your browser... maybe you'll luck out and shell_exec isn't disabled...

_________________
http://jeffchannell.com - Joomla Extensions & Web Development
Unsolicited private messages/emails asking for help = you wish to hire me to fix your problem.
καλλιστι


Top
   
 
Posted: Tue Nov 03, 2009 7:45 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Jul 12, 2009 6:03 pm
Posts: 27
Hi

I've tried but it displays error:

Warning: shell_exec() has been disabled for security reasons in /usr/home/xxxxxxxxxxxxxxxxxxxxxx.es/web/permfix.php


I have read on other forums that is not good idea changes right from WebHosting Panel or FTP Client because it can happen problems. That the most correct thing is to do it from own joomla site, but how? I cannot go folder for folder


regards

_________________
Regards


Top
  E-mail  
 
Posted: Tue Nov 03, 2009 8:05 pm 
User avatar
Joomla! Ace
Joomla! Ace
Offline

Joined: Tue Jun 09, 2009 2:21 am
Posts: 1265
Location: WV
Okay, that was just a shot to see if that would work. I would recommend contacting your host to either change them for you or allow you ssh access.

_________________
http://jeffchannell.com - Joomla Extensions & Web Development
Unsolicited private messages/emails asking for help = you wish to hire me to fix your problem.
καλλιστι


Top
   
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

Quick reply

 



Who is online

Users browsing this forum: antanas, electrra and 20 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group