[ask] security issue

[isul]

I have read the installation guide. It said that we must make read and write (chmod 777) some folder like files/, app/database/, app/cache/, app/config/, theme/. is it necesary to make chmod 777 to the folder? I think make it read-write is not secure. Can i make it to be chmod 755? Thank your answer. sorry my english not too good

[ningus]

In my experience it depends on your/providers servers config what permissions other than 777 on given folders would work. You can test it yourself. I don’t think it is insecure. Look what happens when you try to reach YOURSITE/bolt/app/config/config.yml from your webbrowser.

[isul]

Tengs a lot ningus. I am not security expert. I have googling. Some say that chmod 777 is bad idea. Here is the example
https://www.drupal.org/node/39887

[ningus]

isul, the discussion in your link concludes that there is indeed write access for any user on server-side but not from outside, if this is your concern. Of course this could be worrying if your ISP has not set up it's server properly. Here is another explanation: https://superuser.com/questions/648064/why-forum-setting-requires-me-to-set-some-files-folders-to-777-permission-right#answer-648083