Question

I’m using a Thumbnail plugin. It store thumbs in a folder on webroot.
but when it’s trying to save the thumb, returns “no writable” error. it directory permission is 755.
If i change permission to 777, error disappears. but I read somewhere 777 permission can cause security issues..

What should I do?

Answer 1

you could change the owner (e.g. chown www-data:www-data your/direcotry/path in linux)

chown [OPTIONS] [Owner][:[Group]] FilenameOrFoldername

that the web-server user (the user who executes php scripts) owns the directory, then he has write access and you can leave the rights to 755.

7 5 5 = rwx r-x r-x

read write execute

first digit = owner
second digit = group
third digit = all other users

means that only the owner has write access (he can add files to the directory in this case the www-data user), the group (www-data) has read and execute rights and the rest has read and execute rights too, so there should not be a security risc with 755.

Here you have a tool where you can calculate the right -> chmod number conversion