[TYPO3] Web host security

[Benjamin Mack]

Hey,

first: please do not use 4.0.4, instead use the latest stable version 
which is 4.1.0. You can get it from www.typo3.org

so. In fact, after unzipping the files to the public_html, only the 
directory

fileadmin/ (even that is optional, I think)
uploads/
typo3temp/
typo3conf/

need to have write access for TYPO3 (probably run by the apache user). 
All the other files and directories can be read-only.You can do this in 
the public_html directory via:

-----------
chown apache:apache -R .
chmod a-w -R .
chown u+w -R fileadmin/ uploads/ typo3temp/ typo3conf/
-----------

Please make sure (via the TYPO3 Install Tool) that after these commands 
TYPO3 has all needed access rights.

-- 
greetings,
benni.
-SDG-

www.xnos.de // www.xnos.org