Last modified: 2010-05-15 15:56:53 UTC
In a non-shared hosting enviroment with suphp and where there's 500+ shell accounts, 777 directories for images are an unnessecary security risk. This patch ( http://www.netsoc.tcd.ie/~bbrazil/tmp/mediawiki-permissions.diff ) adds a new configuration variable $wgUploadPermissions which lets you control this. Default is 777 to preserve current semantics. I suggest 755 for those in a suphp type enviroment such as ours. Tested on Mediawiki 1.6.7 on apache 2.0.58/php 4.4.1/Solaris 8/sparc.
Fixed in r37756