Uploaded File Permissions

[mhsuffolk]

For the last 3 or 4 years all the image files that Phoenix uploads to my site have the file permission set to 0777 presumably by Phoenix.
I notice in admin\includes\classes\upload PHP there is;

Code: Select all

public function __construct($file = '', $destination = '', $permissions = '777', $extensions = '') {

Should the 777 be 644?

The copyright date of this file is 2021 so was the previous method 777?

[ecartz]

was the previous method 777?

Yes, it's always been 777.

You can try changing it to 644 or even 600 if you like. Not sure that it makes much difference, as the vulnerable thing is the web server, which will have the 6 in that scenario. There may be some shared server scenarios where it matters.