Problem with SFTP and Joomla permisions

Another day another problem :D Just when I finally managed somehow to create a SFTP connection for another user it seams like that could be the source for my next problem.

I have a joomla site, which I transfered to Linode, made a SFTP account so user can upload files and can't see other stuff on server. Site is working fine, but I can't upload images (and I guess can't install modules) from joomla admin interface.

In joomla admin, when I go to Information - Directory Permissions I see that all folders have status Unwritable.

If I log in as a root (user can't change permisions) and change permisions to 777 it all fine, I can upload images.

But that is a security risk, right? What should I do now? How to set permissions to 755 and still be able to upload images and install modules?

Thanks for any suggestion!

4 Replies

To upload modules etc from the admin interface you need to have the components and extensions directories (both public and admin ones) set to be either world read/writable, or group read/write with the www-data group.

Also make sure the cache and tmp directories are world read/writable, many components will bug out if you try to install them without this done properly.

Yes, joomla is a bitch, welcome to hell.

:D

"..or group read/write with the www-data group" well this could be solution, how do I do that?

My joomla directories are owned by the user I created earlier for SFTP conection. Now, If that user could stay the owner, and also www-data group to be able to read/write that would be solution.

Is this possible?

Use suPHP or run PHP as a cgi and use suExec:

http://alain.knaff.lu/howto/PhpSuexec/

@waldo:

Use suPHP or run PHP as a cgi and use suExec:

http://alain.knaff.lu/howto/PhpSuexec/

Or you can use php fpm if you're using php 5.3

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct