View Single Post
  #9 (permalink)  
Old 08-Jul-2009, 08:25
ken_yap ken_yap is online now
Flux Capacitor Penguin
 
Join Date: Jun 2008
Location: GMT+10
Posts: 5,228
ken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud ofken_yap has a reputation to be proud of
Default Re: FTP user for joomla installation

You can change the ownership of the Joomla directories and files to wwwrun and then you will be able to modify things through the web interface.

Once your site is bedded down though, it would be additional security to change the ownership away to some other account so that the site cannot be defaced through any latent bug in the Joomla code that takes advantage of being able to write to the installation files. (Yes, web apps do remain a large area of vulnerability for servers.) Any areas that are used for uploads (e.g. pictures, attachments, etc) should however remain writable to Apache.

You could also enable the FTP feature, since it shouldn't be an issue if you are accessing it internally. But you still have to make the Joomla directories owned by wwwrun for FTP to be able to write there. I can't tell you how to get the Joomla FTP feature working though, I didn't use it.
Reply With Quote