Ryan .. whats is you advice ..

[zak]

hello ryan ..

could you tell me ,,, what is the best way to secure my open realty , means from giving the permission for folders and files , admin area ,, or what we should keep on server from files and folders of open realty beside removing the install files



redgs

[greengiant]

Hi,

Your internet user is going to need RW permissions to the "listing_photos" and "user_photos" directories that are in teh images dir. Other then that they only need read permsions on the rest of the files. You should read up on the security risk invloved in running php with register_global = on, which unfortunatly open-realty still requires, this is somehting i am working on. Other then that I know of no security holes in open-realty.