4

I am working on a web app that needs read/write access to an SQLite database file. As I understand it, the parent folder needs to be set to 777 in order to be able to open the database with PHP (source).

What are the recommended file permissions for the .db file itself? Bear in mind that I need to be able to overwrite the file with PHP as well.

Furthermore, are there any security risks with the database if its parent is 777? The folder is created by PHP. I'm just trying to make sure I can get work done without creating security risks.

Thanks!

Community
  • 1
  • 1
Clifton Labrum
  • 13,053
  • 9
  • 65
  • 128

1 Answers1

7

You should have Apache (the web server) own the folder.

Or maybe create a group like www-dev consisting of MySQL and Apache and then set the folder group to www-dev and the permissions to 770 .

Just don't make the folder public with 777 - specially on a shared server.

Frankie
  • 24,627
  • 10
  • 79
  • 121