• Welcome to Simple Machines Community Forum. Please login or sign up.

Big Performance Tip: Specify a Custom Avatar Directory

Started by Something like that, September 30, 2007, 10:19:16 PM

Previous topic - Next topic

aED


青山 素子

Motoko-chan
Director, Simple Machines

Note: Unless otherwise stated, my posts are not representative of any official position or opinion of Simple Machines.


akguide

I created the folder on my server as avs  gave it the same permissions as the attachments folder, however I get An Error Has Occurred!
The attachments upload directory is not writable. Your attachment or avatar cannot be saved.
when trying to upload an image from profile

oh and if I get that figured out how do I run the script to have database look for the images in the new location?

Thanks in advance.

TigPT

I have just lost my avatars on my server after run the sql query, and when i do this code:


index.php?action=manageattachments;sa=moveAvatars

i get the error:
O directório de upload dos anexos não é de escrita. O seu anexo ou avatar não pode ser gravado.
(can't write, don't have premissions)
Even with the avs path with same acess as atachments one.

Can someone help me? Thanks.

Something like that

Quote from: TigPT on May 28, 2009, 01:34:28 PM
I have just lost my avatars on my server after run the sql query, and when i do this code:


index.php?action=manageattachments;sa=moveAvatars

i get the error:
O directório de upload dos anexos não é de escrita. O seu anexo ou avatar não pode ser gravado.
(can't write, don't have premissions)
Even with the avs path with same acess as atachments one.

Can someone help me? Thanks.

If the permissions match, chances are you typed in the path to the directory incorrectly.

Romanj

What about security of this way access to avatars?
As I know, when user upload his file on site, and then place and name of this file on server is known, its security vulnerability.
Or there are no reasons to worry about it?


p.s. sorry for my broken english:)

Arantor

It's only an issue if the file contains something malicious. SMF has protection against it.

Note this very forum uses this method.
No good deed goes unpunished
All helpful urges should be circumvented

Tanshaydar

There is a problem for me, when I choose Upload Avatars -> "to a specific directory" I can't enter a directory. I'm using 2.0 RC2

Arantor

No good deed goes unpunished
All helpful urges should be circumvented

Tanshaydar


Something like that

Quote from: Romanj on December 15, 2009, 12:56:30 PM
What about security of this way access to avatars?
As I know, when user upload his file on site, and then place and name of this file on server is known, its security vulnerability.
Or there are no reasons to worry about it?


p.s. sorry for my broken english:)

It's just an image.

There is a small potential for a security vulnerability, if you have other vulnerable software running on the same machine, but not with SMF.

NoobDeveloper

hi All

Nice tip.  But i have one doubt.  After i create a separate directory in root folder what should be its permission set ? 777 or 775 or any other ?

Please guide me.  Thanks in advance.

Note :  I am on shared hosting and don't want any security issues after this change.

Owdy

Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0


Owdy

Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0

Arantor

777 is only a security risk if you are on a shared server. Anything where you're the only user generally isn't.
No good deed goes unpunished
All helpful urges should be circumvented

NoobDeveloper

Quote from: The Grinch on December 19, 2009, 05:19:52 AM
777 is only a security risk if you are on a shared server. Anything where you're the only user generally isn't.

thanks. Yes i am on a shared host. And have already moved the location of folder where avatars are stored.  now please tell me what to do ? what permission should i set to that folder ?

also see if you can help me here
http://www.simplemachines.org/community/index.php?topic=354763.0

Arantor

No good deed goes unpunished
All helpful urges should be circumvented

NoobDeveloper

ok i will set it to 755 for my new avatar directory.

also my Public_html folder is set to 777.

what should i set it to ? 

Arantor

755 generally, however note that it may have consequences for you for updates as so on depending on how the host set it up.
No good deed goes unpunished
All helpful urges should be circumvented

Advertisement: