Is there any possibilities for my site visitors can run shell files under scripts folder of drupal root directory?

If it is, how do I make secure? OR let me know they are secured by default

Comments

Selva.M created an issue. See original summary.

cilefen’s picture

cilefen CreditAttribution: cilefen commented
Priority: Major » Normal
Issue tags: -Security improvements
amit0212’s picture

amit0212 CreditAttribution: amit0212 as a volunteer and commented

Here’s how:

Just give the permission to files and settings.php as below command.

sites -> 755
sites/default -> 755
sites/default/files -> 775
sites/default/settings.php -> 444