Installing cms mounting bolts for production

Question

I am using a cms bolt . I want to take it to production, but just noticed that the documentation and other tutorials ask me to do this:

chmod -R 777 files/ app/database/ app/cache/ app/config/ theme/

I'm not a security expert, but from what I read 777, it’s usually a bad idea. I understand that boot and cache disks should be 777, but are not sure why others are needed.

I wanted to know if

• What are the security risks, if any.
• There is another way to remove a bolt or workarounds for production.

Answer 1

You need

• /
• / / , sqlight, mysql postgres
• //
• app/config/ /, css. ssh ftp.

Answer 2

777 , , , - , , solutiion

apache            ,            

Answer 3

777 , -.

You should try installing 755 (only the owner can write), if that doesn't work, try 775 (the owner and group can write). Use only 777 as a last resort.