Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
4
Impact
~901 people reached

  • 0 posts edited
  • 0 helpful flags
  • 22 votes cast
2d
comment PhpMyAdmin (on ubuntu lamp): Login without a password is forbidden by configuration (see AllowNoPassword)
I can confirm this solution works in 14.04
Apr
6
comment .htaccess and linux permissions
Thanks @Kromey. The .htaccess file does not allow serving php from this directory, and we also resize the images as they come in (using imagick) and use mod_rewrite for all incoming urls. We're looking at using finfo to inspect the files themselves, since MIME type is unreliable. Any other advice or sources are much appreciated. =D
Apr
6
comment .htaccess and linux permissions
Aha! That makes a lot more sense. It seems apache sets the umask correctly and I was confused on execute for directories. Thanks.
Apr
6
comment .htaccess and linux permissions
The user can upload images to their site. They are saved and served from /files. I don't want execute permissions on this directory to prevent users from uploading malicious files and having execute permissions.