which files are need permissions 777 !!

san3auni

which files are need permissions  777
and what i should do to make discuz save from hacking !

thanks in advance

vot

In most of cases it is not required to enable "All for All" (=777).
In a real case it is require to enable WRITE permissions for the web-server-owned user ( i.e. "apache" or "www" ).

The idea is simple:
Enable write/create permissions for all the data folders (including it's subfolders),
and enable write permissions for all the files inside that folders.

Go to your AdminCP and choose Tools -> File permissions.
X2 will say what the items it want to be writable.

san3auni

what about attachment file !?

is there any file i should use htaccess for it

vot

htacces is used ONLY if you enable static URLs in your AdminCP.
Otherwise it is not required.

in X2 only "data" & "articles" folders must be writable.

san3auni

so do you have any security tips !?
to be save from hacking

vot

X2 already has built-in anti-hacking methods...