2

One of my colleagues told me to change the permissions of the sitemap.xml to 777 by using chmod 0777. Is this secure?

The sitemap.xml is inside a media folder where our marketing team has access to via FTP. My fear is that they could just change the file, inject evil code and change its extension.

Black
  • 136
  • 6
  • Do you really want any local user to be able to arbitrarily change the sitemap? – forest Feb 15 '19 at 09:35
  • No I don't but my colleague gave me the "command" – Black Feb 15 '19 at 09:41
  • This is not secure, but if you are still using FTP for file uploads, you should revise your security policy and practices thoroughly rather than clinging to such details as single file permissions. – Esa Jokinen Feb 16 '19 at 07:24

0 Answers0