main menu

• web hostings 
• domain names 
• informations

submenu

• news
• FAQ
  • Opening a new all2all account
  •  Webserver Apache, FTP and CGI
    • How to upload my website?
    • FTP setup
    • 403 forbidden error
    • Formmail CGI
    • What are the Sendmail and Perl paths?
    • How do I set the permissions?
    • How to configure Apache with .htaccess file options?
    • How to set up authentication with Apache?
  • Email and mailing Lists
  • MySQL and PHP
  • Streaming Media Content
  • How to react in an emergency?
• glossary
• documentation
• about all2all
• links

page content

How do I set the permissions on my CGI programs and other files?

As you don't have shell access you have to do this from within your FTP client program with which you upload your files. Do not change the permissions of the cgi-bin/ folder when doing so you could compromise the security of your website.

Most of the simpler FTP clients offer a graphical attribution of the permissions:

user group world

read () () ()

write () () ()

execute () () ()

You just have to click to grant the rights. As you can recognize the holder of the rights becomes less and less trustworthy: the user rights are for yourself, the group rights are for the groups you are a member of and the world are the visitors of your website.

As you are no group's member consider the group and the world as the entities that you have to grant very carefully rights to.

For a very simple CGI program you would grant for instance these rights:

user group world

-rwx --x --x

In certain cases your CGI could need read access for the world too:

user group world

-rwx r-x r-x

A good practise is to use always as few permissions as possible.

The above example could be also written in octal values, like this:

user group world

-rwx --x --x

would be 755.

and

user group world

-rwx --x --x

would be 711.

Putting it simple: you choose from 0-7 for each of the three groups, user, group and world.

0 means no access right at all

1 means execute rights (be careful)

2 means write rights (be careful)

4 means read rights (that's the only right needed for standard HTML files)

If you add the octal values together you combine the rights, for instance 1+2=3 3 means execute and write rights.

You may play around with these rights in your directory to better learn how to use them. Don't forget to always verify the rights you set. An error could be fatal to your content's security.

For your common HTML files you would grant only 644 permissions. This means that you, the user has read and write rights (4+2=6); the group has read rights (4) and the world has read access too (4); (sumed up this makes: 644). Generally your FTP client uses these careful permissions as default.