XF 1.1 Data, Internal_Data "777" & Security?

[TheBigK]

This might be a dumb question; but I don't want to regret later for not asking this . Xenforo installation requires that the data and internal data directories should be 777.

Is there any way this can cause security problem?

 

[Floris]

It comes with an .htaccess file that starts with deny all.

 

[TheBigK]

It comes with an .htaccess file that starts with deny all.

I just checked. The 'internal_data' does have .htaccess but 'data' does not. Is that as designed? Or do I need a copy of .htaccess from 'internal_data' folder in my 'data' folder?

 

[Floris]

Some more info by Mike is posted here: http://xenforo.com/community/threads/things-xenforo-writes-to-filesystem.22341/

 

[TheBigK]

Nice ! Thanks a lot, Floris. I'm your fan!

 

[Forsaken]

http://www.simplemachines.org/community/index.php?topic=2987.0

Covers it well enough and isn't all that confusing compared to other articles I've seen regarding it.