[pmwiki-users] Uploaded files world readable!?

Oliver Betz list_ob at gmx.net
Fri Dec 28 03:12:46 CST 2012


"Patrick R. Michaud" wrote:

>> upload.php uses "fixperms($filepath,0444);", therefore uploaded files
>> get world read access, correct?
>> Why is this needed?
>
>Short answer: Fixperms only adds the minimum permissions necessary 
>to ensure that the account owner has sufficient permission to access 
>the file.
>
>Longer answer:  Some PHP installations run programs under a 

[...]

I think I understood the general intention of fixperms, but the
question is, why upload.php _generally_ adds 0444.

That's IMO not in the sense of the fixperms automatic.

Oliver
-- 
Oliver Betz, Muenchen (oliverbetz.de)




More information about the pmwiki-users mailing list