Page 1 of 1
hack siteweb repertorie chmod 755
Posted: Thu 2. Feb 2023, 12:25
by stephan-ipt
hi
i use last version keyhelp 23.0, debian 11
repertories of website is by default chmod 755
/home/users/my-users/www/my-user-web-site.fr/
www is chmod 750
but my-users-web-site.fr is chmod 755
why ?
when i change my-users-web-site.fr with chmod 750, website is
Forbidden
You don't have permission to access this resource.Server unable to read htaccess file, denying access to be safe
hown can i have chmod 750 for all website
thanks
stéphan
Re: hack siteweb repertorie chmod 755
Posted: Thu 2. Feb 2023, 12:34
by Alexander
Hello,
The 0755 is required for the web server to access the files.
No other user can access the files because other users cannot pass through /home/users/<USERNAME>/www for example.
So the 0750 would not increase security and would also result in FORBIDDEN because, as I said, Apache would be locked out.
Re: hack siteweb repertorie chmod 755
Posted: Thu 2. Feb 2023, 12:45
by stephan-ipt
hi thanks for information
but i migrate prestashop website on keyhelp and every day now is hacked
before i was on imscp and htdocs is 750 and never hack
now is hack
so i ask me why now with keyhelp
Re: hack siteweb repertorie chmod 755
Posted: Thu 2. Feb 2023, 12:53
by Alexander
This is definitely not the reason for your "hacked" website (what should it mean anyway "hacked everyday"?!).
It is very likely, that you have plugins etc. in your web application which cause the issue. This is not a KeyHelp issue.
Re: hack siteweb repertorie chmod 755
Posted: Tue 7. Feb 2023, 19:16
by nobody
stephan-ipt wrote: ↑Thu 2. Feb 2023, 12:45
but i migrate prestashop website on keyhelp and every day now is hacked
Check the log files and find the breach, make a complete scan of the www folder.
Alexander wrote: ↑Thu 2. Feb 2023, 12:53
It is very likely, that you have plugins etc. in your web application which cause the issue
Lots of plugin "developers" for e-commerce websites (opencart, prestashop, ecc.) write horrible code.
If you don't know how to fix stuff, hire some developer to do it for you.