Scan file or folder with bad permissions - php

Question

I'd just like to see a list of files and folders where folder <> 755 and file <> 644
Is there a script that can recursively scan all files/folders on my web server for this info?
My site got hacked, a bunch of files were set to 200 permissions, its a Joomla 1.5 site, so many files/folders, will take for ever to do this manually.
Host at 1and1 and is a linux shared server
I'm looking for a PHP script
SOLUTION (thanks Robert for info)
For some reason on windows and linux folders return 55
I got the function for perms from http://php.net/manual/en/function.fileperms.php
<?php
$path = realpath('.');
$files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path),RecursiveIteratorIterator::SELF_FIRST);
$c = 0;
foreach($files as $name => $f){
$perm = file_perms($f);
if ($perm!="644" && $perm!="755" && $perm!="55") {
$c++;
echo "<b>".$perm."</b> :: ";
echo $f->getPathname()."<br>";
if ($c==200) {exit();}
}
}
function file_perms($file, $octal = false)
{
if(!file_exists($file)) return false;
$perms = fileperms($file);
$cut = $octal ? 2 : 3;
return substr(decoct($perms), $cut);
}
?>

Answer 1

You can use php with chmod() function and resursive directory iterator
To check file permissions you can use fileperms() function. It returns the file's permissions as a numeric mode. You can use resursive directory iterator + this checking with fileperms() and you can set permissions with chmod(). With Directory Iterator you can also use getPerms() method.
Example:
$path = realpath('/path/to/dic');
$files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path),RecursiveIteratorIterator::SELF_FIRST);
foreach($files as $name => $f){
if($f->getPerms() != 775 && $f->isFile()) {
chmod($fileinfo->getPathname(), 0775);
echo getPathname();
}
}
This will set chmod to 775 for files that have different permissions. You can also use 3 methods to check read/write/exec permmisions:
DirectoryIterator::isExecutable() - Determine if current DirectoryIterator item is executable
DirectoryIterator::isReadable() - Determine if current DirectoryIterator item can be read
DirectoryIterator::isWritable() - Determine if current DirectoryIterator item can be written to

Answer 2

You should upgrade to more recent Joomla! version as soon as possible. Otherwise, you'll face more and more successful attacks in the future, because Joomla! 1.5 has reached EOL (end of life) a long time ago.
Generally it is a good idea to use a tool like Akeeba Admin Tools, which can do exactly what you asked for, and a lot of other useful stuff to harden your Jommla! installation.

Answer 3

find /home/*/public_html -type d -perm 755