[PHPTAL] Cache / Compilation behavior
Brice Burgess
bhb at iceburg.net
Thu May 8 16:46:42 CEST 2008
Kornel Lesinski wrote:
> On Thu, 08 May 2008 02:43:45 +0100, Brice Burgess <bhb at iceburg.net>
> wrote:
>
>> Having users set proper permissions on a "working" directory crosses
>> eyes... let alone the introduces the possibility of a security risk
>> as "777" is the lowest common denominator here!
>
> 0700 is the lowest, if you make this directory owned by web server
> process.
My apologies for being vague. I meant 777 as the "lowest common
denominator" because it's the "easiest". poMMo is open source software
that is meant to be simple to install. The vast majority of users don't
know what an "owner" is, let alone the user in which the webserver runs
under.
Also, the software (kind of) supports IIS, so I don't like to rely on
.htaccess files to accomplish anything.
---
From the responses received thus far; it looks like PHPTAL does depend
on a user-configured writable directory to compile its templates to?
Is it possible to store compilations in a MySQL table -- and get rid of
the directory dependence?
Many thanks,
~ Brice
More information about the PHPTAL
mailing list