Hi.

I've just installed drupal and I've not seen any instructions on basic setup-security. I'm sure it's there, but I've searched with out result.
Can anyone please post some links or help me out here.

Specificly - settings.php contains the db password. Who should own settings.php and how should it be chmod'ed?
And how about for the directory structure.

Comments

Bo’s picture

I've tried to read search the INSTALL.txt for 'security' and the forums as well, but the first didn't give anything and the prior gave too much. :)

Here's what I've found so far: http://drupal.org/node/27573
It's not exactly what I was looking for but maybe the module will tell me some more.