777 file permissions. Are they really required? (Answer: NO!)

[admin]

The short and simple answer is no, you do not need to have permissions of 777 (world-writable) to use SnippetMaster.

In fact, I do not recommend putting your files to permission of 777.  

The long and complicated answer is that the permissions needed are 100% dependent on your web hosting server configuration. In other words, the required permissions to "write" to a file you are trying to edit has nothing to do with the SnippetMaster software itself.

It totally depends on your web hosting provider, and how they have configured any PHP software (such as SnippetMaste) to "run" on their servers.

If your hosting provider has configured PHP software to run as the "nobody" apache web server user.. then you will need to give permission of 777 to your files if you want them to be writable/editable by PHP software (such as SnippetMaster).  This is insecure, and you should find a different hosting provider that does things differently.  Period.

You should use a good hosting provider that runs PHP using "cgi mode".  This means that all PHP software (SnippetMaster) runs on the web server as your actual website account user, instead of with the "nobody" user.. so that you don't have to give world-write permissions of 777 to the files you want your PHP software (SnippetMaster) to be able to edit.  

Any good hosting provider should run PHP like this (using "cgi mode").  Most don't because it is easier to run PHP using "nobody" user.. and also takes less resources (cpu/memory, etc), so the host can put more accounts on their server to make more profit.

 It is more expensive to run a web server with PHP using the more secure "cgi mode", which is why such accounts cost more...  the advantage is that you don't need to give "777" permissions to your files and security is much better.

If you'd like a referral to a good hosting provider (where PHP is run using "cgi mode") and where you can get free SnippetMaster PRO licenses (rebrandable version), please let me know.

Also, please feel free to post a reply here if you have any questions about Snippetmaster security or file permission requirements.







  

[qiuan]

Well, very good news. But who!!

I verify with my hosting provider, I could execute cgi script into a folder www.exemple.com/cgi-bin/snippetmaster.pl. Could be possible to post user_account to SnippetMaster from the script? Because, (i'm very newby in cgi) I juste make a redirection from a cgi script into the cgi-bin folder and SnippetMaster still keep the everyone right.

You could find all information about my webserver here : https://admin.nexlink.ch/phpinfo.html

Thanks for your help

Qiuan

[admin]

I'm sorry, but I don't understand what you are trying to do.  There is no "snippetmaster.pl" file in Snippetmaster.  You also do not need to install it "under" a cgi-bin folder.

[qiuan]

hello,

I'm sorry, effectively it's not clear. I create the snippetmaster.pl file with a redirection to the snippetmaster folder. I thought that will keep the user access, but not.

What I could do to keep user access with my possibility to execute cgi script into cgi-bin folder? I try to but the snippetmast program into it but that's didn't run :/

Thanks for your quick response!

[admin]

I still do not understand what you are trying to accomplish. 

Are you trying to allow Snippetmaster users to run cgi-bin programs?  If so.. this has nothing to do with SnippetMaster...

[qiuan]

Ok. thanks for your second reply while you don't understand me...

I try to execute SnippetMaster with full access on my HTML files, while giving 777 right on them. Apparently, my hosting provider don't give cgi-mode anywhere on my webserver, but i could execute cgi script or something link that into a folder name cgi-bin. I try to copy and execute SnippetMaster from this folder, but apparently the webserver can't execute php script from there.

I find these information about my webserver from my hosting provider https://admin.nexlink.ch/phpinfo.html
You could find about cgi these :
- under apache2handler / Loaded Modules / mod_cgi => Are there the "cgi mode" that you speak into you first message?
- under Apache Environment / GATEWAY_INTERFACE / CGI/1.1

So I create myself my website with HTML / PHP / CSS, but I’m absolute not a strong coder. I don't understand anything about cgi, and please help me to deploy SnippetMaster without give 777 right on my files. Maybe first step is, if you could say me if it's possible to do that with my hosting provider with the information that I give you. Then, else it's possible, how to do with the possibility that give me my hosting provider.

I hope that this time it's more clear and you understand me.

Thank for your help

[admin]

Hello,

I do not know if it is possible.  The permissions needed to edit your website files is 100% entirely dependent on your web hosting server configuratoin.  You need to contact your web hosting provider and ask them what permissions are needed.

If they tell you that 777 permissions are needed, then you could perhaps consider switching to a different hosting provider that does not require this.  (Let me know if you would like a good recommendation for a good hosting provider that does NOT require 777 permissions for editing files with SnippetMaster.)

Thanks.