1) Please don't post in HTML to the mailing list
2) A better subject line would have gotten you a quicker response from
people who are familiar with this plugin

> Yep, that did, I had to set other to read/write/list on my Roberto
> directory.

YIKES!

Please be more careful about things like that!

You should never need to give world permissions on files/directories for
this plugin.  Read the README file:

Security Notes
==============
Users will only be able to manipulate files which
php will have permission to change, which in most
cases means that they (and containing directory if it
is a file in question) will need to be owned by the
user defined by the web server.  In the case of apache,
you'll want to do something like this (replace "apache"
with "nobody" or as appropriate in your case):

  $ chown -R apache:apache users/base/directory

  or better:

  $ chown -R someuser:apache users/base/directory

(Where "someuser" is the original owner of that directory.)


That is to say, figure out what your web server user is, and change at
least group ownership of all directories you want File Manager access to
that user group and then give GROUP read/write permissions, but NOT world.

 - paul


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id)95
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to