wierd 403 error

[ressel]

Hello,

Everytime I make some changes on a clients website it starts showing 403 error.

Then i do following chmod -R 755 web/
in the domains folder /var/www/domain.tld/

And then it works again.

Im using Debian, and client is using SuPHP

[till]

The website may not have permissions 755 as this is a security problem and allows other websites on your server to get access to the database data of this site. The permissions that ispconfig sets automatically are ok. So if you get a 403 with ispconfigs default permissions, then the files are owned by a wrong user. Please chown them to the website user and client group of this website.

[ressel]

Originally Posted by till

The website may not have permissions 755 as this is a security problem and allows other websites on your server to get access to the database data of this site. The permissions that ispconfig sets automatically are ok. So if you get a 403 with ispconfigs default permissions, then the files are owned by a wrong user. Please chown them to the website user and client group of this website.

This is weird, when i look in ispconfig in options field it says:
Linux User web24
Linux Group client16

and when i look in the folder it's the same owner

[till]

- Are all files and subfolders owned by these user and group?
- Is the user of the apache webserver member of the client16 group (see /etc/group) file?

[ressel]

Originally Posted by till

- Are all files and subfolders owned by these user and group?
- Is the user of the apache webserver member of the client16 group (see /etc/group) file?

yes, all files a owned even subfoldes / files by this user / group.

client16:x:5015:apache

[till]

And the user name of your apache server is apache?

[ressel]

Originally Posted by till

And the user name of your apache server is apache?

no, its www-data...

Changed it now. thanks

[till]

Dont forget to change it in ispconfig server settings as well.