How to set directory permissions in DedeCMS

How to set the DedeCMS directory permissions?

1. Directory permissions

According to statistics, most website attacks start in the root directory. Therefore, the column directory cannot be set in the root directory. .

Recommended learning: Dreamweaver cms

After DEDECMS deployment is completed, the key directory settings are as follows:

1) Delete install.

2) Set the data, templets, uploads, a or html directory to be readable and writable, and cancel the execution permissions (how does Windows set the permissions of the directory?); of course, there is a better solution for the data folder. , that is to move the data out of the root directory of the site.

3) If the website does not need special topics, the special directory must be deleted. If necessary, some netizens suggested this: After generating HTML, back up special/index.php and delete it, and then set the directory to read-write, non-executable permissions; however, this is more troublesome, because every After the first generation, you need to delete the index.php file, and you need to restore it the next time you execute "generate".

4) The include, member, plus, and background management directories are set to executable scripts, which are readable but not writable (the same is true for book, ask, company, and group directories with additional modules installed).

2. Other issues that need attention

1) Unless absolutely necessary, do not directly use the MySQL root user permissions on the website. Generally, it is the same The website corresponds to a mysql user, and the permissions are:

SELECT, INSERT , UPDATE , DELETE
CREATE , DROP , INDEX , ALTER , CREATE TEMPORARY TABLES

Since DEDE does not use stored procedures anywhere, it is necessary to disable FILE, EXECUTE, etc. to perform stored procedures or file operations.

3. Always pay attention to the official website of dede and apply dede patches in time.

The following are some file permission settings

When users build a website, website security cannot be ignored. Let me share with you the security settings tutorial for each directory of DreamWeaver. for reference.

/ [Site superior directory]

If you want to use the background directory-related functions, you need to have the permission to list the directory //0444

/ [Site root directory]

Require execution and read permissions. If you want to create files and directories under the root directory, you need to have write permissions //0755

/install [Installation program directory]

Requirements Have execution and read permissions//It is recommended to delete or change the name after the installation is completed//0555

/dede [Background program directory]

Requires execution permissions and read permissions//It is recommended that the installation is completed Correct the directory name in the future //0755

/include [Main program directory]

requires write, execution and read permissions //0755 //It is recommended that after the first installation, Remove write permissions and modify permissions (temporarily enable write and modify permissions when rewriting the configuration file)//0555

/member [Member Directory]

Requires execution of read and permissions //It is recommended to remove the write permission and modification permission//0555

/plus [Plug-in Directory]

Requires read, write and execute permissions//It is recommended to generate the site map after and RSS files, remove the write permission and modification permission //0755

/data [Site cache data and other files]

Requires read permission and write modification permission//It is recommended to remove the execution Permissions //0666

/html [HTML document default directory]

requires read, modify and create permissions // It is recommended to remove the execution permissions //0666

/templets【 Template Directory】

Requires read, modify and write permissions //It is recommended to remove execution permissions//0666

/uploads 【Attachments Directory】

Requires write and read permissions //It is recommended to remove the execution permissions//0666

/company [Enterprise Yellow Pages Program Directory]

Requires read and execution permissions//It is recommended to remove the write permissions//0555

/special [Special File Directory]

Requires execution, read, write and modify permissions//0755

/book [Book Library Module Program Directory]

Requires execution , read, write and modify permissions//0755

/ask [Q&A module program directory]

Requires execution and read permissions//It is recommended to remove the write permissions//0555

/group [Circle module program directory]

Requires execution and read permissions//It is recommended to remove write permissions//0555

The above is the detailed content of How to set directory permissions in DedeCMS. For more information, please follow other related articles on the PHP Chinese website!