write permissions - What do I do

[eric97007]

This is what my hosting compay emailed me when I asked them to change the permissions on the config php files

"The CHMOD command is not supported on plan. Your server runs on Windows 2003 Server, which does not offer the CHMOD command.

If you were looking for a way to configure write permissions, this is something you can request via a support ticket.

Please make note of our write permissions policies:

- We only offer write permissions on directories, not files.

- Any directory that has write permissions configured will also have script execute permissions turned off. That means no scripts (.cfm,.asp,.aspx,.pl,.cgi,.php, etc . . .) will execute in that directory. This is a security policy in place to protect your data, as well as the server in general. Allowing write permission and script execution in the same directory is a known security hole for Windows server environments.

- We cannot make your website root (www folder) writeable."

[TinaS]

Change to a linux server

Sorry - don't be offended - it really is a better idea.

[eric97007]

I am looking around for a new host. Does any one know of good ones?

[Ajeh]

Peeking in our Zen Cart Certified Hosting at the top of the screen is a great idea ... they got on the list for a reason ...

[jman]

Sounds like the host just needs to set the two configure.php files to READ ONLY. This is something that alas, IIS does not support from the client side.

They should be able to do that for you, just drop an email & be as specific as possible: "In mydomain.com, please set /includes/configure.php to read only" or words to that effect.

While a *nix-based host (presumably running Apache) will give you slightly more control over your site, even if you're stuck on 'doze don't despair; most times you don't need to go around fiddling with the individua file properties anyway. Once the configs are set up right they don't need to be touched.

Group, please correct me if I'm wrong, but except for the cache folder, nothing really gets written out anyway, it's all in the database.