Re: FTP user for joomla installation
You can change the ownership of the Joomla directories and files to wwwrun and then you will be able to modify things through the web interface.
Once your site is bedded down though, it would be additional security to change the ownership away to some other account so that the site cannot be defaced through any latent bug in the Joomla code that takes advantage of being able to write to the installation files. (Yes, web apps do remain a large area of vulnerability for servers.) Any areas that are used for uploads (e.g. pictures, attachments, etc) should however remain writable to Apache.
You could also enable the FTP feature, since it shouldn't be an issue if you are accessing it internally. But you still have to make the Joomla directories owned by wwwrun for FTP to be able to write there. I can't tell you how to get the Joomla FTP feature working though, I didn't use it.
|