20080821 1902 GMT-6

Discovered today that a script that the school "THOUGHT" had been working for 
the past two years - inst!

Their upload script uploads the picture into the images/ dir and then creates a 
thumnail of it and puts it in the thumb/ dir. That all works.

Their delete script first deletes the photos and then the student data from the 
db. Ah... the photos have not been deleted.

Looking at the permisions I see that images/ and thumb/ are both 1600775 
www-data owner. The picture in images/ is 600600 but the one in thumbs/ is 
600644. That is a problem.

All the thumbs have been deleted but the pictures themselves are not. Now, Ill 
write some code to change the rw permissions of the pic but what Im after is, 
why is it that the main pic is rw to the owner and non to the group but on the 
thumb its rw for the owner and read-only for the owner. Why can that one be 
deleted?

Wade

Reply via email to