Hello I have some compromised sites, and generally I put them in RO: chmod a-w web/ in the meantime someone of my partner will check it and fix it. Nightly, I note sites come back to be writeable by owner. Simple question: which source does it so that I can change it?
There is no nightly job in ISPConfig that I'm aware of that alters permissions of files in websites. Maybe you enabled the change permissions on update option under System > Server config > web and someone alters the web settings, as this will cause a reset of the permissions to their defaults.
