Shulou(Shulou.com)06/02 Report--

Editor to share with you the method of setting the directory permissions of the DEDECMS website. I hope you will gain a lot after reading this article. Let's discuss it together.

How to set the permissions of DEDECMS website system directory?

If your website data is very important (forget the kind of garbage dump that can be done in two days), it is recommended to follow the security steps described in this article.

1. Directory permissions

We do not recommend that users set the column directory in the root directory, because it will be very troublesome to set security in this way. By default, after the installation is completed, the directory is set as follows:

(1) set read / write permissions to the html directory of data, templets, uploads, an or 5.3.

(2) if there is no need for a special topic, it is recommended to delete the special directory. After generating the HTML, delete the special/index.php and then set the directory to read / write, unexecutable permission.

(3) include, member, plus, background management directories are set to executable scripts, readable, but not writable (book, ask, company, group directories with add-ins are also set).

2. other problems that should be paid attention to

(1) although the install directory has been strictly handled, for security reasons, we still recommend that it be deleted.

(2) do not directly use the permissions of MySQL root users for websites. Set up an independent MySQL user account for each website. The permissions are as follows:

SELECT, INSERT, UPDATE, DELETE CREATE, DROP, INDEX, ALTER, CREATE TEMPORARY TABLES

Since DEDE does not use stored procedures anywhere, it is important to disable permissions for FILE, EXECUTE, and so on to perform stored procedures or file operations.

3. How to set the permissions of the directory?

For users who know how to use Linux, I believe most of them already know these things.

(1) set the directory to read-only

(2) setting directory does not allow execution

Setting does not allow script execution

It is also important to note that neither IIS nor Apache should add .php and .inc files to mime, which will prevent them from being downloaded.

After reading this article, I believe you have a certain understanding of the method of setting the directory permissions of the DEDECMS website. I would like to know more about it. Welcome to follow the industry information channel. Thank you for your reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.