diff --git a/scripts/install b/scripts/install
index db02e8b..0ea769f 100755
--- a/scripts/install
+++ b/scripts/install
@@ -183,6 +183,7 @@ ynh_store_file_checksum --file="$final_path/menu.php"
 
 # Set permissions to app files
 chown -R root: $final_path
+chmod -R o-rwx $final_path
 
 # Wiki needs to write inside these folders. Make "Wiki" owner
 chown -R $app:root $final_path/var
diff --git a/scripts/restore b/scripts/restore
index a05d5b0..447d2f4 100755
--- a/scripts/restore
+++ b/scripts/restore
@@ -69,6 +69,7 @@ ynh_system_user_create --username=$app
 
 # Restore permissions on app files
 chown -R root: $final_path
+chmod -R o-rwx $final_path
 
 #=================================================
 # RESTORE THE PHP-FPM CONFIGURATION
diff --git a/scripts/upgrade b/scripts/upgrade
index b37a8c0..26d2f22 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -29,6 +29,20 @@ phpversion=$(ynh_app_setting_get --app=$app --key=phpversion)
 
 upgrade_type=$(ynh_check_app_version_changed)
 
+#=================================================
+# BACKUP BEFORE UPGRADE THEN ACTIVE TRAP
+#=================================================
+ynh_script_progression --message="Backing up the app before upgrading (may take a while)..." --weight=4
+
+# Backup the current version of the app
+ynh_backup_before_upgrade
+ynh_clean_setup () {
+	# restore it if the upgrade fails
+	ynh_restore_upgradebackup
+}
+# Exit if an error occurs during the execution of the script
+ynh_abort_if_errors
+
 #=================================================
 # ENSURE DOWNWARD COMPATIBILITY
 #=================================================
@@ -47,20 +61,6 @@ if ynh_legacy_permissions_exists; then
 	ynh_app_setting_delete --app=$app --key=is_public
 fi
 
-#=================================================
-# BACKUP BEFORE UPGRADE THEN ACTIVE TRAP
-#=================================================
-ynh_script_progression --message="Backing up the app before upgrading (may take a while)..." --weight=4
-
-# Backup the current version of the app
-ynh_backup_before_upgrade
-ynh_clean_setup () {
-	# restore it if the upgrade fails
-	ynh_restore_upgradebackup
-}
-# Exit if an error occurs during the execution of the script
-ynh_abort_if_errors
-
 #=================================================
 # DOWNLOAD, CHECK AND UNPACK SOURCE
 #=================================================
@@ -126,6 +126,7 @@ ynh_restore_file -o "conf/config.php"
 
 # Set permissions on app files
 chown -R root: $final_path
+chmod -R o-rwx $final_path
 
 #=================================================
 # RELOAD NGINX