Search…

X3 Photo Gallery Support Forums

Search…
 
Krajak
Topic Author
Posts: 2
Joined: 30 Jul 2009, 07:13

No permission to blah blah blah

30 Jul 2009, 07:21

I have the following problem:

1. Error: You don't have the permission to save for this folder

I don't have permission to do anything in the admin panel, I know there is heaps of threats about this subject, I have read through most of them but none had a solution for me, I have checked if I did the password correctly, and i also checked for the CHMOD 777 thing.

Any help? ^^

http://krajak.110mb.com/upload/index.php
 
User avatar
Nick
Imagevue Hitman
Posts: 2872
Joined: 02 May 2006, 09:13

30 Jul 2009, 11:42

groupfolder name="Tibia" mode="770"
folder path="../content/Tibia/Fun/" perm="770"
folder path="../content/Tibia/Quests and Missions/" perm="770"

groupfolder name="Wallpapers" mode="770"
folder path="../content/Wallpapers/Made in Photoshop/" perm="770"

I believe there are not enough permissions for php to write to folders.
firedev.com
 
Krajak
Topic Author
Posts: 2
Joined: 30 Jul 2009, 07:13

30 Jul 2009, 18:18

in the faq of the hosting site that I am using, it says

Million dollar advice: 644 & 640 is the same. 755 & 750 is the same. 777 & 770 is the same. Always having a 0 on the end is MUCH safer for your script against hacking. Lot of people don't know this!

hopefully someone can help me :P
 
User avatar
Nick
Imagevue Hitman
Posts: 2872
Joined: 02 May 2006, 09:13

31 Jul 2009, 04:29

Dunno who writes those faqs, ask them how php can write to directory with 770 permissions then.

Try 777 and see the difference.
firedev.com
 
johnallan
Posts: 14
Joined: 23 Jul 2009, 12:13

31 Jul 2009, 18:58

pain wrote:Dunno who writes those faqs, ask them how php can write to directory with 770 permissions then.

Try 777 and see the difference.
Because php is running (presumably) as group apache.
Which means that 777 and 770 represents no difference in permissions really except that setting Everyone to rwx is a bigger security vulnerability in general.

770 gives you rwx for both owner and group. Personally I set owner of everything on my webserver as my ftp web administration login and group as apache.

ie. cd /var/www/maindirectory ; chown -R webadministrator:apache . ; chmod -R g+w .

So the FAQ is basically correct, although it leaves out some important explanation.
 
User avatar
Nick
Imagevue Hitman
Posts: 2872
Joined: 02 May 2006, 09:13

03 Aug 2009, 04:17

Well technically yes, just php is not writing to folders?

Also check permissions on descriptions files inside, __dir.txt.
firedev.com
 
DcPhotoGraph
Posts: 4
Joined: 01 Nov 2009, 13:44

25 Nov 2009, 09:08

Hi,

Is there any issue to avoid directory listing (pictures and xml configuration files) by anybody ? I've tried to change the chmod parameter from 777 to 770 and all pictures in my gallery appear as blank jpeg files.

I've turned off the "useswfaddress" parameter to hide my server folder tree in the URL when a visitor is viewing my website. It's also possible to do a direct access to a folder and download all the content if the user know the exact name of the folder.

How can I resolv my problem ?

Thanks :wink:
 
User avatar
mjau-mjau
X3 Wizard
Posts: 14452
Joined: 30 Sep 2006, 03:37

25 Nov 2009, 11:41

You mean when you access one of your folders from the web, it is listing the contents of the folder? This has nothing to do with neither imagevue or permissions. This is a server setting(usually Apache) whih needs to be set from your host to prevent directory listing.
 
DcPhotoGraph
Posts: 4
Joined: 01 Nov 2009, 13:44

25 Nov 2009, 13:22

Thanks,

I've made a .htaccess file with "Options -Indexes" and copied it to the root folder of imagevue. :roll:
 
User avatar
Nick
Imagevue Hitman
Posts: 2872
Joined: 02 May 2006, 09:13

30 Nov 2009, 06:11

Yeah, great. Another method (which is particulary useful for windows hosting) is to create empty index.html files in each dir.
firedev.com