To make sure, i have re-downloaded (with wget) xoops-2.3.1.tar.gz from sourceforge.net/project/showfiles.php?group_id=41586&package_id=153583&release_id=632372 to verify another time, but it's the same. All the directories and sub-directories with all the files in them are set to 777!

Can someone verify this.

greetings

I beg your pardon, it's 755 but recursive, so all FILES are set executable! I think this is unnecessary with PHP (i may be wrong, but i don't have any file executable in my web space).

File Permissions have to be set more secure than this.

Greetings