Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
Spin-off from #1611686: Add test for unprotected settings.local.php:
Problem
- File and directory permissions (especially for settings.local.php) might be purposively writable, but Drupal automatically changes the permissions.
Goal
- Only warn about permissions. Provide a link or button to change them.
Or to quote @Dries:A better pattern may be this: if Drupal identifies that the files are not properly secured, there could be a "Fix permissions" link or button in the warning message, that executes a callback that will try to fix the permissions. Like that, Drupal doesn't automatically fix the permissions but still makes it very easy for people to (try and) get their permissions fixed.
Comments
Comment #1
catchYes this has annoyed me in the past as well.
Comment #2
emudojo CreditAttribution: emudojo commentedComment #3
sun