database.inc.php is world read and write after install #1062

Open
opened 2026-10-05 00:30:26 +02:00 by adam · 0 comments
Owner

After doing a new netinstall (on a Dreamhost shared server) of Piwigo 2.10.2, the file piwigo/local/config/database.inc.php (which contains the database authentication information) has protection 666, world readable and writable.

dh_akhcfg@william-floyd:~/gal02.dd-b.net/piwigo/local/config$ ls -l
total 8
-rw-rw-rw- 1 dh_akhcfg pg75234 319 Oct 7 13:48 database.inc.php
-rwxr-xr-x 1 dh_akhcfg pg75234 610 Oct 7 13:36 index.php`

After doing a new netinstall (on a Dreamhost shared server) of Piwigo 2.10.2, the file piwigo/local/config/database.inc.php (which contains the database authentication information) has protection 666, world readable and writable. >dh_akhcfg@william-floyd:~/gal02.dd-b.net/piwigo/local/config$ ls -l >total 8 >-rw-rw-rw- 1 dh_akhcfg pg75234 319 Oct 7 13:48 database.inc.php >-rwxr-xr-x 1 dh_akhcfg pg75234 610 Oct 7 13:36 index.php` <!-- github-sync-id:718669269 -->
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#1062