Re: renaming configure.php
You have FTP correct??
I believe that you can FTP it to your win local change it to RO there and FTP it back
Re: renaming configure.php
That doesn't work. I have tried setting the IUSR account setting to read only but it does nothing. I am running WAMP server locally but my actual domain will be hosted on Windows.
So my original query...can configure.php be renamed?
Re: renaming configure.php
Quote:
Originally Posted by
g1media
So my original query...can configure.php be renamed?
If you rename it, then you have to alter all the core code locations that reference it to use the new name.
Renaming doesn't solve the problem of the file being writable and thus editable and your site defacable and database-connection breakable if someone were to break in.
Re: renaming configure.php
but what are the chances of someone guessing what the file is now called?
so, other than accessing IIS at server level, there's no way to secure this file on Windows?
Re: renaming configure.php
If PHP discovers the configure.php files to be writable, you will continue to see warnings.
If you feel the security risk is minimal or moot, you can customize code to either bypass the warnings or look for the configure.php files by a different name. Feel free to do as you wish.
Setting file/folder permissions on Windows hosting, esp with IIS, has always been a problem.
If your hosting company cannot give you the control you need to secure your site (not just the configure.php files), then perhaps you should consider other hosting options.