File and dir permissions / owner problem ? - Joomla! Forum - community, help and support

hi there, hacked , had sorts of issues, managed remove dodgy files find 1,500 viagra links , login redirect

i've gotten far restoring site using kunena forum. members can't upload profile pics or attachements, i've tried myself , have found due write permissions chmod 777 fixes issue don't want go there , open security risk.

also in admin configuration.php can't written (same above 777 works). thought update of joomla may fix issues update fails appears files can't downloaded. trying install new extension found files couldn't 'moved' not write permission.

any suggestions appreciated.

forum post assistant output below

thanks

problem description :: forum post assistant (v1.2.3) : 8th december 2012 wrote:write permissions or owner stopping updates , kunena uploads

last php error(s) reported :: forum post assistant (v1.2.3) : 8th december 2012 wrote:[30-nov-2012 23:48:31 utc] php warning: cannot modify header information - headers sent (output started @ /home/xxxxx/public_html/includes/lb.php:3) in /home/xxxxx/public_html/components/com_sobipro/lib/env/cookie.php on line 47

actions taken resolve forum post assistant (v1.2.3) 8th december 2012 wrote:tried update joomla thought update set things straight. chmod 777 works dirs don\'t want create security risk. site hacked why i\'ve started receiving issues.

forum post assistant (v1.2.3) : 8th december 2012 wrote:

basic environment :: wrote:joomla! instance :: joomla! 2.5.4-stable (ember) 2-april-2012
joomla! platform :: joomla platform 11.4.0-stable (brian kernighan) 03-jan-2012
joomla! configured :: yes | read-only (644) | owner: xxxxx (uid: 1/gid: 1) | group: xxxxx (gid: 1) | valid for: 2.5
configuration options :: offline: 0 | sef: 1 | sef suffix: 0 | sef rewrite: 1 | .htaccess/web.config: yes | gzip: 0 | cache: 0 | ftp layer: 0 | ssl: 0 | error reporting: default | site debug: 0 | language debug: 0 | default access: 1 | unicode slugs: 0 | database credentials present: yes

host configuration :: os: linux | os version: 2.6.32-220.13.1.el6.x86_64 | technology: x86_64 | web server: litespeed | encoding: gzip,deflate,sdch | doc root: /home/xxxxx/public_html | system tmp writable: yes

php configuration :: version: 5.3.19 | php api: litespeed | session path writable: unknown | display errors: 1 | error reporting: 22519 | log errors to: error_log | last known error: 01st december 2012 01:48:31. | register globals: 0 | magic quotes: 1 | safe mode: 0 | open base: /home/xxxxx:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/lib/php:/tmp | uploads: 1 | max. upload size: 2m | max. post size: 8m | max. input time: 60 | max. execution time: 30 | memory limit: 128m

mysql configuration :: version: 5.1.65-cll (client:5.1.65) | host: --protected-- (--protected--) | collation: utf8_general_ci (character set: utf8) | database size: 351.86 mib | #of tables:  209

detailed environment :: wrote:php extensions :: core (5.3.19) | date (5.3.19) | ereg () | libxml () | openssl () | pcre () | sqlite3 (0.7-dev) | zlib (1.1) | bcmath () | calendar () | ctype () | curl () | dom (20031129) | filter (0.11.0) | ftp () | gd () | hash (1.0) | iconv () | spl (0.2) | json (1.2.1) | mysql (1.0) | session () | standard (5.3.19) | posix () | reflection ($id: 593a0506b01337cfaf9f63ebc12cd60523fc2c41 $) | phar (2.0.1) | simplexml (0.1) | sockets () | sqlite (2.0-dev) | imap () | tokenizer (0.1) | xml () | xmlreader (0.1) | xmlwriter (0.1) | litespeed () | suhosin (0.9.33) | timezonedb () | zend engine (2.3.0) |
potential missing extensions :: zip | mbstring | mysqli | mcrypt |

switch user environment (experimental) :: php cgi: no | server su: no | php su: no | custom su (litespeed/cloud/grid): yes
potential ownership issues: no

folder permissions :: wrote:core folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) |

elevated permissions (first 10) ::

extensions discovered :: wrote:components :: site :: com_wrapper (2.5.0) | googlemap v3 layout (-) | kunena forum - english (1.7.2) | wf_visualchars_title (2.2.1.2) | wf_autosave_title (2.2.1.2) | wf_visualblocks_title (2.2.1.2) | wf_article_title (2.2.1.2) | wf_inlinepopups_title (2.2.1.2) | wf_preview_title (2.2.1.2) | wf_table_title (2.2.1.2) | wf_fullscreen_title (2.2.1.2) | wf_textcase_title (2.2.1.2) | wf_link_title (2.2.1.2) | wf_layer_title (2.2.1.2) | wf_directionality_title (2.2.1.2) | wf_anchor_title (2.2.1.2) | wf_cleanup_title (2.2.1.2) | wf_contextmenu_title (2.2.1.2) | wf_browser_title (2.2.1.2) | wf_print_title (2.2.1.2) | wf_style_title (2.2.1.2) | wf_media_title (2.2.1.2) | wf_source_title (2.2.1.2) | [do not buy our kitchens!] (2.2.1.2) | wf_nonbreaking_title (2.2.1.2) | wf_paste_title (2.2.1.2) | wf_searchreplace_title (2.2.1.2) | wf_xhtmlxtras_title (2.2.1.2) | wf_imgmanager_title (2.2.1.2) | wf_spellchecker_title (2.2.1.2) | wf_links_joomlalinks_title (2.2.1.2) | [youtube] (2.2.1.2) | wf_aggregator_vimeo_title (2.2.1.2) | wf_filesystem_joomla_title (2.2.1.2) | wf_popups_jcemediabox_title (2.2.1.2) | wf_popups_window_title (2.2.1.2) | wf_mediaplayer_jceplayer_title (2.2.1.2) | wf_link_search_title (2.2.1.2) | com_mailto (2.5.0) | default sobipro template (1.0) | notifications (0.9.2) | blueface (2.6.1) | blackout (2.6.1) | default (2.6.1) | blueface (2.4.3) | bubble (2.6.1) | blackout (2.4.3) | bubble (2.4.3) |
components :: admin :: com_login (2.5.0) | com_cpanel (2.5.0) | com_banners (2.5.0) | com_joomlaupdate (2.5.0) | com_categories (2.5.0) | com_newsfeeds (2.5.0) | com_finder (2.5.0) | com_templates (2.5.0) | com_users (2.5.0) | com_languages (2.5.0) | hotspots (2.0.5) | googlepro (1.1.0) | shoutbox (2.0b1) | com_config (2.5.0) | akeeba (3.6.9) | com_cache (2.5.0) | com_search (2.5.0) | hello (component ver) | com_messages (2.5.0) | com_menus (2.5.0) | plg_system_kunena (1.7.2) | system - kunena (1.7.2) | plg_system_kunena (-) | plg_system_kunena (-) | kunena language pack (@kunenaversio) | com_kunena (1.7.2) | kunena forum - english (1.7.2) | com_redirect (2.5.0) | com_regreminder (1.6.2.6 stand) | com_content (2.5.0) | com_modules (2.5.0) | com_admin (2.5.0) | com_checkin (2.5.0) | com_weblinks (2.5.0) | unknown (-) | plg_quickicon_jcefilebrowser (2.5.0) | jce file browser (2.0.0) | editor - jce (2.2.1.2) | jce (2.2.1.2) | rokmodule (1.3) | com_plugins (2.5.0) | acymailing (3.5.0) | acymailing tag : subscriber in (3.5.0) | acymailing tag : content inser (3.5.0) | acymailing : share on social n (1.0.0) | acymailing : statistics plugin (3.5.0) | acymailing tag : joomla user (3.5.0) | acymailing : (auto)subscribe d (3.5.0) | acymailing tag : website links (3.5.0) | acymailing : trigger joomla co (3.5.0) | acymailing module (3.5.0) | acymailing table of contents g (1.0.0) | acymailing template class repl (3.5.0) | acymailing tag : manage su (3.5.0) | acymailing tag : cb user infor (3.5.0) | acymailing tag : date / time (3.5.0) | acymailing manage text (1.0.0) | com_xmap (2.2.1) | com_installer (2.5.0) | com_media (2.5.0) | sobipro (1.0.5) | jomsocial (2.6.1) |

modules :: site :: mod_articles_news (2.5.0) | ced read tags (2.5.5) | mod_articles_categories (2.5.0) | mod_random_image (2.5.0) | phoca - google adsense easy (2.0.2) | mod_whosonline (2.5.0) | ced popular tags (2.5.5) | ced latest tags (2.5.5) | mod_stats (2.5.0) | hello me (2.2.4) | mod_custom (2.5.0) | latest news + (2.0.2) | mod_users_latest (2.5.0) | ced custom tags cloud (2.5.5) | mod_related_items (2.5.0) | mod_articles_latest (2.5.0) | mod_banners (2.5.0) | mod_feed (2.5.0) | mod_login (2.5.0) | rokweather (1.6) | acymailing module (3.5.0) | mod_breadcrumbs (2.5.0) | mod_menu (2.5.0) | ced random tags (2.5.5) | mod_shoutbox (2.0) | mod_search (2.5.0) | mod_finder (2.5.0) | mod_syndicate (2.5.0) | mod_weblinks (2.5.0) | sobipro entries module (1.0) | mod_languages (2.5.0) | mod_articles_archive (2.5.0) | mod_footer (2.5.0) | mod_wrapper (2.5.0) | mod_articles_category (2.5.0) | mod_kunenalatest (1.7.2) | mod_articles_popular (2.5.0) |
modules :: admin :: mod_toolbar (2.5.0) | sobipro admin menu (1.1) | mod_title (2.5.0) | joomla statistics module (1.1.0) | mod_multilangstatus (2.5.0) | mod_custom (2.5.0) | mod_feed (2.5.0) | mod_login (2.5.0) | mod_popular (2.5.0) | mod_logged (2.5.0) | mod_menu (2.5.0) | mod_submenu (2.5.0) | mod_quickicon (2.5.0) | mod_status (2.5.0) | mod_version (2.5.0) | mod_latest (2.5.0) |

plugins :: site :: plg_system_debug (2.5.0) | plg_system_remember (2.5.0) | plg_system_nnframework (11.11.3) | system - zend lib (1.11.4) | azrul system mambot joomla (2.6.1) | system - jomsocial facebook co (2.6.1) | tapatalk kunena plugin (1.0.2) | plg_system_kunena (1.7.2) | plg_system_logout (2.5.0) | plg_system_sef (2.5.0) | plg_system_redirect (2.5.0) | plg_system_languagefilter (2.5.0) | jomsocial update (2.6.1) | plg_system_cache (2.5.0) | acymailing : (auto)subscribe d (3.5.0) | plg_system_log (2.5.0) | plg_system_p3p (2.5.0) | plg_system_highlight (2.5.0) | plg_system_languagecode (2.5.0) | plg_system_modulesanywhere (1.13.3) | system - regreminder scheduler (1.6.1.1) | plg_user_joomla (2.5.0) | plg_user_profile (2.5.0) | plg_user_contactcreator (2.5.0) | welcome message (2.0.7) | user - jomsocial user (2.6.1) | plg_content_googlepro (1.0) | plg_content_joomla (2.5.0) | plg_content_pagenavigation (2.5.0) | plg_content_kunenadiscuss (1.7.2) | plg_content_extravote (1.6.0) | plg_content_pagebreak (2.5.0) | plg_content_vote (2.5.0) | content - sjl weblinks (3.0.6) | plg_content_emailcloak (2.5.0) | plg_content_finder (2.5.0) | plg_content_loadmodule (2.5.0) | plg_content_geshi (2.5.0) | plg_jmonitoring_akeebabackup_t (1.0) | plg_extension_joomla (2.5.0) | acymailing : subscribe during (2.0) | walls (2.6.1) | plg_authentication_joomla (2.5.0) | plg_authentication_ldap (2.5.0) | plg_authentication_gmail (2.5.0) | xmap - mosets tree plugin (2.0.2) | xmap - kunena plugin (2.0.2) | xmap - content plugin (2.0.3) | xmap - weblinks plugin (2.0) | xmap - virtuemart plugin (2.0.0) | xmap - sobipro plugin (2.0.1) | plg_quickicon_jcefilebrowser (2.5.0) | plg_quickicon_extensionupdate (2.5.0) | plg_quickicon_joomlaupdate (2.5.0) | acymailing : trigger joomla co (3.5.0) | acymailing tag : joomla user (3.5.0) | acymailing template class repl (3.5.0) | acymailing tag : content inser (3.5.0) | acymailing tag : website links (3.5.0) | acymailing : statistics plugin (3.5.0) | acymailing : share on social n (1.0.0) | acymailing tag : date / time (3.5.0) | acymailing table of contents g (1.0.0) | acymailing tag : manage su (3.5.0) | acymailing tag : cb user infor (3.5.0) | acymailing tag : subscriber in (3.5.0) | acymailing manage text (1.0.0) | plg_finder_content (2.5.0) | plg_finder_newsfeeds (2.5.0) | plg_finder_categories (2.5.0) | plg_finder_weblinks (2.5.0) | plg_finder_contacts (2.5.0) | plg_editors_tinymce (3.4.9) | editor - jce (2.2.1.2) | plg_editors_codemirror (1.0) | plg_captcha_recaptcha (2.5.0) | plg_search_content (2.5.0) | plg_search_newsfeeds (2.5.0) | plg_search_categories (2.5.0) | plg_search_weblinks (2.5.0) | plg_search_contacts (2.5.0) | plg_editors-xtd_readmore (2.5.0) | plg_editors-xtd_article (2.5.0) | plg_editors-xtd_pagebreak (2.5.0) | plg_editors-xtd_image (2.5.0) | plg_editors-xtd_modulesanywher (1.13.3) |

templates discovered :: wrote:templates :: site :: ja_purity (1.2.0) | rhuk_milkyway (1.0.2) | beez_20 (2.5.0) | darkiphonetemplate (1.0) | beez5 (2.5.0) | atomic (2.5.0) | rt_afterburner_j15 (1.5.0) | strike & hook (1.0) |
templates :: admin :: bluestork (2.5.0) | hathor (2.5.0) |

have tried 755 dirs , 644 files? standard permission config