Hacker News new | ask | show | jobs
by driverdan 2394 days ago
I have a shared hosting account with Dreamhost. A while back I went looking for accessible stuff under other user's accounts. It was fairly easy to find both readable and writable directories.

This was a while ago so I don't know if they found a solution. User home directories are private but you can easily guess common paths under them (eg wordpress).

1 comments

`wp-content/uploads` that everyone set to 777 because Wordpress used to (maybe still does?) have obtuse documentation on how to make this writeable in a safe way.