PHP Security CHMOD 600 question

[Digitalroot]

How does apache still have access to run a script thats been chmod to 600 ???

That should allow only myself read access to the file. I ask because on another host files with chmod 600 lockout apache. What config option was used to allow apache to read my chmod 600 files?

[Pig]

I believe this is related to how apache is set up to run PHP. I think powweb has apache run PHP as owner, which is why you don't have to give user and group privies.

[NMS]

Are you sure you managed to chomd successfully? The only way you can chomd to 600 is by using domain.com/+sitemanager

[tbonekkt]

The only way you can chomd to 600 is by using domain.com/+sitemanagerNo, you can use any FTP client to CHMOD to 600. Below 600 requires the use of webftp or a script of some sort.

[NMS]

I just checked using ws_FTP and it let me go down to 000 without problems. Seems that issue has been solved.

[tbonekkt]

I just checked using ws_FTP and it let me go down to 000 without problems. Seems that issue has been solved.Double-check the permissions on that file you just chmoded. The FTP daemon doesn't allow the setting of permissions below 600, so this really wasn't an issue per se.

[NMS]

You are right ... it converted a 000 to 600 automatically

[Pig]

That is a confusing point. It doesn't give an error message, it just converts it to the next possible setting. Unless you refresh, it looks fine. I have seen this confuse several customers. :|

[Digitalroot]

thank you pig. That sounds like a good answer.