Bitrix - Forums

Forums

Setting the right Security settings for a Bitrix installation, Giving propper rights

User

Posts: 85 Joined: 04/28/2011

05/29/2012 15:10:32

Best..,
Bitrix needs a lot of writing permissions to make a propper installation. So now we set a lot of access on the "httpdocs" (root) folder. But not a lot of hosting companys want to set this much writing premissions on a root folder because of the lack of security.

What is your opinion on the writing settings for Bitrix (installation) and is there a safer way to install then just setting full access on the httpdocs folder..

With kind regards,

Lars

Quote Name

Anna Slyshkina Administrator Posts: 611 Joined: 03/13/2008	#2 05/29/2012 16:33:30 Please find more info here: http://www.bitrixsoft.com/support/faq/5079/#63798 http://www.bitrixsoft.com/support/training/course/index.php?COURSE_ID=12&LESSON_ID=443
	Quote Name

Visited

User

Posts: 85 Joined: 04/28/2011

05/29/2012 19:24:26

Hi Anna,
Thank you for your reply. The thing I dont get is.. We want the give the user the ability to use the Bitrix upate function, a lot of folders have to get Full access for this. Because in every update different folders have to be edited, or folders need to be created. And if I dont give 777 permissions on these folders it wont update. Also uploading images on products etc wont work with limited permissions.

Some CMS systems have a Upload folder where all the new files are stored so the easy thing to do is give the Upload folder a lot of premissions. But with Bitrix it is not know what folders will be updated so there is no way of telling wich folders/files should have higher permissions than others..

So I dont know what the safe way is to set these permissions and on what folders I should do this.

The main quesion.. How do I set enuff premissions on the server so it will/can use al Bitrix functions, without it beeing vulnerable for hackers etc.

With kind regards,

Lars

Quote Name

Anna Slyshkina Administrator Posts: 611 Joined: 03/13/2008	#4 05/30/2012 10:46:44 Actually, the product does not require 777 permission. You should ask your hosting service provider about permission that secure and which allows the user under which Apache is running to write and read to product directory.
	Quote Name

Users browsing this topic

BBCode Rules

Reply form

Bitrix Partner Network has more than 7,000 IT professionals who put their trust in our technologies and assist customers with installation and maintenance. All Bitrix Partners enjoy lucrative discounts on our products and services. Join our Partner Network now! Submitting a Bitrix Partner application is very easy and quick!

Login:
Password:
	Remember me on this computer

Forgot your password?
Register