[Code 1.5.2] Lockdown Directories 1.0

[[Unknown]]

Only for use with YaBB SE, pfaBB, and YaPP.  Use with any other forum software or distribution is strictly prohibited.  (this includes ttForum/ttCMS.)

All this does, or should do, is chmod the folders and directories correctly according to the FAQ here:
http://www.yabbse.org/community/index.php?board=135;action=display;threadid=15904

Do note that this requires that PHP be *able* to do the chmod.  If you want to run this as a different user, you'll need shell access.... something like:

> ssh www.yourdomain.com -lyouruser
Password: (type it here...)
$ cd /home/yourdomain/public_html/yabbse
$ php -f chmod_fix.php
$ exit
> exit

Also note, I run Windows so I wasn't able to comprehensively test this....

Code Select Expand

<?phprequire('Settings.php');require_once($sourcedir . '/Subs.php');require_once($sourcedir . '/Errors.php');require_once($sourcedir . '/Load.php');require_once($sourcedir . '/Security.php');$dbcon = mysql_connect($db_server, $db_user, $db_passwd) or die(mysql_error());mysql_select_db($db_name) or die(mysql_error());$request = mysql_query("   SELECT variable, value   FROM {$db_prefix}settings   WHERE variable != 'agreement'") or database_error(__FILE__, __LINE__);$modSettings = array();while ($row = mysql_fetch_row($request))   $modSettings[$row[0]] = $row[1];mysql_free_result($request);LoadCookie();LoadUserSettings();if ($modSettings['userLanguage'] == 1 && !empty($settings[23]))   include_once($boarddir . '/' . $settings[23]);else   include_once($boarddir . '/' . $language);is_admin();RestrictFiles();function RestrictFiles(){   global $boarddir, $sourcedir, $imagesdir, $facesdir, $modSettings, $helpfile;   // /   chmod_dir($boarddir, 0755, false);   // /attachments   chmod_dir($modSettings['attachmentUploadDir'], $modSettings['attachmentEnable'] == '1' ? 0777 : 0755);   // /Sources   chmod_dir($sourcedir, 0711);   // /Packages   chmod_dir($boarddir . '/Packages', 0755);   // /YaBBImages/*.*   chmod_dir($imagesdir, 0711);   // /YaBBImages/avatars   chmod($imagesdir . '/avatars', 0755);   // /YaBBHelp/*.*   chmod_dir(dirname($helpfile), 0711);   // Now the files.....   chmod($boarddir . '/Settings.php', 0644);   chmod($boarddir . '/Settings_bak.php', 0644);   chmod($boarddir . '/template.php', 0644);}function chmod_dir($dirname, $setting, $recurse = true){   @set_time_limit(30);   // We need to read through it first.   chmod($dirname, 0755);   // Read through it..   $dir = dir($dirname);   while ($entry = $dir->read())   {      // Recurse on subdirectories.      if (is_dir($dirname . '/' . $entry) && $recurse)         chmod_dir($dirname . '/' . $entry, $setting);      // Just chmod the files restrictively.      elseif (is_file($dirname . '/' . $entry))         chmod($dirname . '/' . $entry, 0644);   }   // Properly chmod the directory.   chmod($dirname, $setting);}?>

-[Unknown]