Skip to content
Castopod Docs

Security concerns

Castopod is built on top of CodeIgniter4, a PHP framework that encourages good security practices.

To maximize your instance’s safety and prevent any malicious attack, we recommend you update all your Castopod files permissions after installation or updates (to avoid any prior permission error):

  • writable/ folder must be readable and writable.
  • public/media/ folder must be readable and writable.
  • any other file must be set to readonly.

For instance, if you are using Apache or NGINX with Ubuntu you may do the following:

Terminal window
sudo chown -R root:root /path/to/castopod
sudo chown -R www-data:www-data /path/to/castopod/writable
sudo chown -R www-data:www-data /path/to/castopod/public/media