settings.php rwx

最新推荐文章于 2025-08-24 16:30:00 发布

转载最新推荐文章于 2025-08-24 16:30:00 发布 · 84 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/qinqiu/p/6235805.html

文章标签：

#php

本文讲解了如何正确设置Drupal中settings.php文件的权限以确保网站安全。重点介绍了文件属性中的XYZ chmod概念，解释了X（所有者）、Y（组）和Z（所有人/世界）的不同权限级别，并推荐使用440或400权限来限制访问。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

440/400

https://www.drupal.org/node/137702

You must understand the meaning of XYZ chmod from file attribute.
X = Owner
Y = Group
Z = Everyone/World

If you set to XY4 then you give Everyone a "read" access! (even the content inside a php file can not read by a browser, but still readable by using ssh, ftp or file browser).
Since settings.php must be only read by your system then you must set to 440 or better 400 (if possible). Gives 440 to a file will protect everyone (except owner and group) to read this file using any access types.

Important:
If your website can not run with 440 then you have a seriously security hole!

转载于:https://www.cnblogs.com/qinqiu/p/6235805.html