From 38049e0eb9005ba2b014e5f6c1ea52f2128e3b66 Mon Sep 17 00:00:00 2001 From: djmaze Date: Wed, 23 Sep 2020 11:40:08 +0200 Subject: [PATCH] Improve data security --- .../v/0.0.0/app/libraries/MailSo/Cache/Drivers/File.php | 2 +- .../app/libraries/RainLoop/Providers/Files/FileStorage.php | 2 +- .../libraries/RainLoop/Providers/Storage/FileStorage.php | 2 +- rainloop/v/0.0.0/include.php | 6 +++--- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/rainloop/v/0.0.0/app/libraries/MailSo/Cache/Drivers/File.php b/rainloop/v/0.0.0/app/libraries/MailSo/Cache/Drivers/File.php index 9a1d8564a..c880c2ef1 100644 --- a/rainloop/v/0.0.0/app/libraries/MailSo/Cache/Drivers/File.php +++ b/rainloop/v/0.0.0/app/libraries/MailSo/Cache/Drivers/File.php @@ -93,7 +93,7 @@ class File implements \MailSo\Cache\DriverInterface $sFilePath = $this->sCacheFolder.$this->sKeyPrefix.$sKeyPath; $dir = \dirname($sFilePath); - if ($bMkDir && !\is_dir($dir) && !\mkdir($dir, 0755, true)) + if ($bMkDir && !\is_dir($dir) && !\mkdir($dir, 0700, true)) { $sFilePath = ''; } diff --git a/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Files/FileStorage.php b/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Files/FileStorage.php index 1db516d58..7f373d39d 100644 --- a/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Files/FileStorage.php +++ b/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Files/FileStorage.php @@ -168,7 +168,7 @@ class FileStorage implements \RainLoop\Providers\Files\IFiles if ($bMkDir && !empty($sFilePath) && !\is_dir(\dirname($sFilePath))) { - if (!\mkdir(\dirname($sFilePath), 0755, true)) + if (!\mkdir(\dirname($sFilePath), 0700, true)) { throw new \RainLoop\Exceptions\Exception('Can\'t make storage directory "'.$sFilePath.'"'); } diff --git a/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Storage/FileStorage.php b/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Storage/FileStorage.php index fc7bdb469..01bfa80a2 100644 --- a/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Storage/FileStorage.php +++ b/rainloop/v/0.0.0/app/libraries/RainLoop/Providers/Storage/FileStorage.php @@ -156,7 +156,7 @@ class FileStorage implements \RainLoop\Providers\Storage\IStorage if ($bMkDir && !$bForDeleteAction && !empty($sFilePath) && !\is_dir(\dirname($sFilePath))) { - if (!\mkdir(\dirname($sFilePath), 0755, true)) + if (!\mkdir(\dirname($sFilePath), 0700, true)) { throw new \RainLoop\Exceptions\Exception('Can\'t make storage directory "'.$sFilePath.'"'); } diff --git a/rainloop/v/0.0.0/include.php b/rainloop/v/0.0.0/include.php index 11d4ed0b7..aa3b9e583 100644 --- a/rainloop/v/0.0.0/include.php +++ b/rainloop/v/0.0.0/include.php @@ -83,11 +83,11 @@ if (!is_dir(APP_DATA_FOLDER_PATH)) { - mkdir(APP_DATA_FOLDER_PATH, 0755); + mkdir(APP_DATA_FOLDER_PATH, 0700); } else { - chmod(APP_DATA_FOLDER_PATH, 0755); + chmod(APP_DATA_FOLDER_PATH, 0700); } $sTest = ''; @@ -102,7 +102,7 @@ case !is_writable(APP_DATA_FOLDER_PATH): $sTest = 'is_writable'; break; - case !mkdir($sCheckFolder, 0755): + case !mkdir($sCheckFolder, 0700): $sTest = 'mkdir'; break; case false === file_put_contents($sCheckFilePath, time()):