trouble with permissions

[indigo]

I've been working on the Ecard tutorial at http://www.flashkit.com/tutorials/Dynamic_Content/Sending_-Jeffrey_-684/index.shtml by Jeff Hill.

In the tutorial, a directory called 'dBText' is needed, and the permissions need to be set to read/write/execute for owner, and read/write for others (groups, world). But if I set these permissions, the dynamic text fields' messages don't appear in the ecard. They will only work if I give everyone permission to read/write/execute.

What do I need to do to fix this?

[Flash-db]

Just keep them at 777 for the directory (which is read, write, execute) for everyone.  

[indigo]

... ok... but the tutorial warns that this should only be used for testing since it can become a security issue. Should I not be concerned about this?? what would we be vulnerable to by leaving the permissions this way?

[Musicman]

Hi,

if you are running on a _typical_ installation, you need 777 for directories where the web server should be able to create new files.
You need 666 for data files that are to be rewritten by the server, but 755 is sufficient for the folder

This actually means that other clients of the same hosting company may be able to mess with your files. There are ways to install a server without that security leak...

Musicman