Best Practice for Folder/File Permissions?

[digitalfilm]

Once Serendipity is in a production environment -- all is running well -- what do people recommend as the best way to lock down the box? I'm on Apache FWIW.

Thanks!!

[garvinhicking]

Hi!

Once s9y runs and you do not need to install any other plugins, s9y only needs write privileges to these things:

* serendipity_config_local.inc.php
* templates_c directory and all files therein
* archives directory and all files therein
* uploads directory and all files therein

All other folders do no longer need write privileges, so you could secure them by checking on that.

HTH,
Garvin

[digitalfilm]

That is exactly the information I needed. Much appreciated!