Serendipity Forums

Once Serendipity is in a production environment -- all is running well -- what do people recommend as the best way to lock down the box? I'm on Apache FWIW.

Thanks!!

Hi!

Once s9y runs and you do not need to install any other plugins, s9y only needs write privileges to these things:

* serendipity_config_local.inc.php
* templates_c directory and all files therein
* archives directory and all files therein
* uploads directory and all files therein

All other folders do no longer need write privileges, so you could secure them by checking on that.

HTH,
Garvin

That is exactly the information I needed. Much appreciated!