0777 used when creating a directory39 if (Flux::config('RequireOwnership'))
40 mkdir($dirname, 0700, true);
41 else
42 mkdir($dirname, 0777, true);43 elseif (file_exists($filename) && (time() - filemtime($filename)) < $interval) {
44 header("Content-Type: image/png");
45 header('Content-Length: '.filesize($filename));0777 used when creating a directory234 }
235
236 if (!is_dir($dir)) {
237 mkdir($dir);238 }
239
240 $this->deleteShopItemImage($shopItemID);0777 used when creating a directory230 $dir = FLUX_DATA_DIR."/itemshop/$serverName/$athenaServerName";
231
232 if (!is_dir(FLUX_DATA_DIR."/itemshop/$serverName")) {
233 mkdir(FLUX_DATA_DIR."/itemshop/$serverName");234 }
235
236 if (!is_dir($dir)) {0777 used when creating a directory 86 if (Flux::config('RequireOwnership'))
87 mkdir($directory, 0700);
88 else
89 mkdir($directory, 0777); 90 }
91 }
92Excessive permissions are granted when creating a directory. This issue is raised when permission greater than 0755 is given, or permissions argument is not specified when creating a directory using mkdir() function. By default, mkdir() function gives universal access(0777) to created folders.
The permission number can be a 3 or 4-digit numeric, where the first digit states permissions for the file owner, the second digit is for the file group, and the last digit states the permission all other users. Each write, read, and execute permissions have the following number value:
r(read) = 4w(write) = 2x(execute) = 1- no permissions = 0
So as an example, to give full permission to file owner and read permission to the group and all other users, use 0744 while creating a directory.
In general, all security rules follow the principle of least privilege, except when the directory being created needs to be accessed by anyone other than the user creating it. It is recommended to give limited set of permissions.
Bad practice
// Bad practice
mkdir('/path/to/dir', 0777);
// Recommended
mkdir('/path/to/dir', 0755);