Like many others in this forum, I cannot set the folder permissions according to the installation guide.
As said on http://docs.opencart.com/display/openca ... +practices we should set the config files to 644 or 444. But if i do that I get the Permission denied error because the config file cannot be included.
I have experimented a lot and found out that I need to assign public write permissions to the config files. This seems quite unsafe to me.
So what's the problem? On the one hand I don't think that ANY user should have write permission on the config. Read and Execute should be enough! On the other hand is the user under which I upload the files (username = myuser) not the same user that is running the apache process (username = apache). I figured if I put them into the same user group, the group permissions would be sufficient.
The following output shows that the apache user is now member of the same group as the user who made the upload.
Code: Select all
id myuser -> uid=504(myuser) gid=505(myuser) groups=505(myuser) id apache -> uid=48(apache) gid=48(apache) groups=48(apache), 502(access), 505(myuser)
Enough threads in this forum propose to set it to 777 - Let's stop this nonsense. It's crazily unsafe to do this.
If anyone (with some linux experience) could help me, I would be very thankful.