SELECT * FROM watchdog WHERE message LIKE '%gecko drwxrxrx updated%'; No. A valid 10-character string is like drwxr-xr-x . drwxrxrx is a common typographical shorthand used in log summaries or error messages when the system truncates the dashes. Always check the real permissions via command line. Conclusion: Don’t Ignore the Gecko The log entry "gecko drwxrxrx updated" is not a random system glitch. It is a signal that a Gecko-based browser (or impersonator) modified a standard web directory. While often benign, it can be the first clue of a permission escalation, a compromised CMS, or a misconfigured backup job.
php_flag engine off in an .htaccess file inside it. This prevents a malicious uploaded script from being executed even if the directory permissions are correct. Run a weekly cron job: gecko drwxrxrx updated
find your-directory -type d -exec chmod 755 {} \; SELECT * FROM watchdog WHERE message LIKE '%gecko
chmod 755 your-directory
grep -r "gecko drwxrxrx updated" /var/log/ Or search your CMS database: Always check the real permissions via command line
