Actually, the files in the screenshot are all world readable (r). The directories are readable
and excutable (x), which is generally what you want for directories.
But i'd suggest an entirely different approach. FTP is a big security hole since passwords are sent in the clear (and can easily be observed by a packet sniffer). It wouldn't take much for someone to hack into any account with FTP access enabled.
A smarter approach is to enable remote logins via
ssh. Updates could then be done via FTP inside an ssh tunnel, or via SFTP. If this user is using a UNIX box, then
rsync would be a perfect solution (much better than FTP) as it can mirror a local copy of an entire web site onto a server, updating any files which have changed, and deleting any files which have been deleted on the master. It can also set permissions and ownership. Combine that with public key pair authorization and a cron job, and it can all happen automagically (for more info on this, see the
rsync, ssh thread).
FYI: You can also set permissions for all files within a folder with a couple commands like this (and it would be a good idea to include it in the upload script to ensure proper permissions):
Code:
sudo chmod -PR u=rw,g=r,o= /path/to/web/root
chmod -PR ug+X,o= /path/to/web/root
I'm planning on writing a GUI front end to
rsync to do all this.
Top
