Internet Search

File and Directory Permissions

Safe setting:- 

  • all files permission 444
  • all directory permission 555
  • root 'htdocs' directory permission 555
  • there should be no "tmp" directory at drupal root , place tmp outside where hackers can not access with weburl
  • sites/default/files directory permission 775
  • all directories in sites/default/files 775
  • all files in sites/default/files 664

Further reading: