Hi Guys,

I would like to know what rights are "required" for users? I am running XOOPS via IIS on Win2K3 and have had quite a few permissions issues. I don’t want to leave the site unsecured for obvious purposes - is there a comprehensive write-up on what permissions are required for the IUSR and IIS_WPG users in the various folders? I know that XOOPS needs write access to certain stuff, but I want to make sure that I don’t give too much permission and get the site jacked...

Thanks,

Tyson

In this FAQ category - the 'protecting from malicious attack' FAQ is pretty complete and links to others. All the permissions listed for *nix systems, you'll have to convert them to Windows.

This is covered in the article on our site about installing XOOPS on systems running IIS 6.

Basically, the IUSR account needs "write" permissions on the following directories:

cache
templates_c
uploads


All other directories should be standard read/list permissions.

Good luck!