Permission prob. in plugins which is installed via Spartacus

[deathline]

Hi developer!

In Serendipity version 1.0
When I have installed any plugins with spartacus 2.7 (permissions and owner is blank ) plugins work but;

Files have been written permissions "755" and owners "nobody".Plugin can works but , i cant write, rename, edit, delete any files this folders with ftp.

When permissions 777 and owner's is my domain in spartacus, files have been written permission 777 and owner's agains "nobody" , i can edit, rename etc. but cant change permissions in concerned folder and files.

Plugins which is installed with ftp work perfectly and no permission change problem and edit,rename etc. Their folders permission is 755.

I know its a bit long problem but i cant resolve it.Someone say me , if file written with php owners will apache user/group and cant delete with ftp , although i can delete some files with a little php script which files i cant touch via ftp.

What can i do for using Spartacus problemless?

Regards

[garvinhicking]

Hi!

You can configure the spartacus plugin to set which owner/permission it applies to downloadde files - I think you refer to this, already?

For existing files/dirs, check the "fixperm.php" script in the www.s9y.org FAQ. When changing the settings in the plugin this only applies to new files; not those already existing.

Best regards
Garvin

[deathline]

You can configure the spartacus plugin to set which owner/permission it applies to downloadde files - I think you refer to this, already?

I've tried configure the spartacus for owner's and permission various like

owner permission
---------------------------
blank blank -----> cant edit files with ftp, cant change perm.
mydomain 755 -----> cant edit files with ftp, cant change perm.
mydomain 777 -----> can edit files with ftp, cant change perm.

Summary i cant write files via "my ftp account owner" so i cant touch files with ftp.Everytimes files owner seems "nobody".

Thanks your abbrevation

Regards

[garvinhicking]

Hi!

Are you entering the right owner name? If the files are always created as "nobody" this either means you are not entering a valid owner name, or your hoster has disabled the "chown()" PHP command.

HTH,
Garvin

[Hathor]

What IS the right owner name? Because most of my plugin files are 777 and I can't change them, I've been hacked recently. According, S9 shouldn't even allow permissions settings to belong to "nobody", as this is a security issue.

I'm currently having to go through and change every single file by hand using the fixperm, which is really not how I wanted to spend my weekend.

What is the correct setting for this NOT to happen again?

[garvinhicking]

Hi!

The right owner name is the name of your webserver user or the name of your FTP user.

All PHP applications set permissions to "nobody", because that is what a webserver runs as. PHP does not know what the "right" name is. That's why the spartacus plugin allows you to define it.

I'm currently having to go through and change every single file by hand using the fixperm, which is really not how I wanted to spend my weekend.

You can adapt that via glob() calls in PHP, or make some foreach loops to enter a list of filenames.

So the correct setting for the future is the proper username of your FTP user. And of course your webserver+PHP must be configured to allow chown() calls.

Best regards,
Garvin