Re: [Postfixadmin-devel] missing layout for postfixadmin on web site

[David G. <da...@co...>]

On 19 Jan 2011, at 16:04, J4 wrote:

>> 
> Hi David,
> 
> I have nuked it with version 2.3.2.  All is well.
> 

good

> On a related topic.  I have a habit of change permissions on files to
> being quite restictive (may have been the cause of the problem).  Would
> you tell me how restictive I can make the files?
> 

it has to be readable by the webserver.

Approaches to make that database password more secure include :

a. embedding it within an Apache variable ? (not sure if this will help a lot)
b. using something like suphp / suexec so each 'website' is associated with a different system user.


chmod -R a-w will break stuff - you'll need at least teh templates_c directory to be writeable for Smarty.

thanks
David.


> In particular, the config.php.ini file contains the entry for the database:
> $CONF['database_password'] = '121212____!!!!!';
> What are the safest permissions for this file?
> 
> Are there any other files that should not have any writable permissions?
> Would a simple chmod -R a-w postfixadmin/  work, or would something break?
> 
> 
> Simon.