Forums

Join
bbPress Support Forums › Installation › Do I have to protect the forum directory

Info

Do I have to protect the forum directory

    • Posted 2 years ago #

    Hi all,

    just installed bbPress at http://www.autogas-umruestungen.de/forum
    Do I have to protect this directory somehow? The index.php is in the same directory with bb-config.php etc. and other vital files?
    Seems unsafe? Or am I wrong?

    Thanks for your help..
    Great tool this bbPress :-)

    Sebastian

    • Posted 2 years ago #

    You don't need to protect anything. All php files should be 0644 permissions, the directories should be 0755. Any file with a php file extension will be processed by PHP on the web server, so for something like the bb-config.php that does not return any content, the browser will not display any contents. A lot of php files with private information in them are like that, with no content returned.

    Load this page:
    http://www.autogas-umruestungen.de/forum/bb-config.php

    There's nothing displayed in the browser since the web server returns the processed output of the php file, not the source of the file.

    • Posted 2 years ago #

    Hi chrishajer,
    thanks for your fast reply.
    Last question: What if someone downloads the files with a different program. Could this person find my database access data including the password in the php which contains this information?

    Best
    Sebastian

    • Posted 2 years ago #

    No - it has nothing to do with the program they use, it's how that file is served by the web server. If the web server is configured correctly (to process PHP files and not display them) then there's nothing to worry about. If your forum is usable, your web server is configured correctly.

    • Posted 2 years ago #

    Thank you very much.
    Cheers
    Sebastian

  6. You must log in to post.