Skip to content

Instantly share code, notes, and snippets.

@khalwat
Last active January 1, 2020 01:10
Show Gist options
  • Star 29 You must be signed in to star a gist
  • Fork 7 You must be signed in to fork a gist
  • Save khalwat/e518fea8438a426a6049 to your computer and use it in GitHub Desktop.
Save khalwat/e518fea8438a426a6049 to your computer and use it in GitHub Desktop.
Properly set permissions for a Craft CMS install, including ensuring that files are all g-x. Set CHOWN_USER, CHOWN_GROUP, and BASE_DIR to whatever is appropriate, add directories that need to be writeable by the web server to DIRS[], then execute: sudo ./set-project-perms.sh PROJECT_NAME
This is now part of craft-scripts:
https://github.com/nystudio107/craft-scripts
@3noch
Copy link

3noch commented Dec 3, 2016

craft/app needs only be writeable if you are using auto-update. This is important because making that writeable can be a vulnerability.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment