Bearbeiten von „ProcessWire - Sicherheit“

== ProcessWire absichern ==
Ausführliche Erläuterung gibt's auf 
 https://processwire.com/docs/security/

'''Kurzform'''

'''Potential permissions for writable directories and files'''
 Permission 755 for directories and 644 for files
 Worst case: 777 for directories and 666 for files

'''Potential permissions for /site/config.php'''
<pre>
Recommend settings if you don't need write access: 
400 [r--------] readable by owner (most secure, if it works)
440 [r--r-----] readable by owner and group (if 400 doesn't work)

Recommended settings if you need write access: 
600 [rw-------] readable and writable by owner (most secure, if it works)
640 [rw-r-----] readable and writable by owner, readable to group
660 [rw-rw----] readable and writable by owner and group

Not recommended unless nothing else will work:*
444 [r--r--r--] readable by all
644 [rw-r--r--] readable by all, writable to owner
664 [rw-rw-r--] readable by all, writable to owner and group
</pre>



'''Assets'''
 755 site/assets (rekursiv)

Determining what user apache runs as
Should /site/modules/ be writable?