#Rant
I'm just trying to restore a web project for which the production server got accidentally deleted.
As I have to do it on an available replacement server, some things are change and I have to read up on stuff. One thing I come across in many tutorials is
chown -R www-data.www-data PATH_TO_WEB_PRESENCE
(often followed by a chmod 66x)
And I think this is WRONG!!!
The directories and the data should NOT be owned by the user of the webserver. Vor security reasons the webserver should only have READ access to the stuff!!
Please correct me if I'm wrong or are overlooking something.
(and yes I understand that with this ownership you avoid permission problems)