Security error after upgrade to PHP5

[Mark Kidd]

I'm hoping someone has seen this issue before -- after an upgrade from PHP 4 to PHP 5, I am receiving the error:

Warning Warning: I am able to write to the configuration file: /home/appalsho/public_html/store/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance. See this FAQ

I have confirmed in my control panel that the permissions are 644. What else could be causing the error?

You can see it in action a http://appalshop.org/store/

[barco57]

Set the permissions on the includes/configure.php to 444

[Mark Kidd]

Set the permissions on the includes/configure.php to 444

That doesn't seem to help. Do you know of anything else to try?


Edit: I should add that the CSS is no longer being applied to the store as well. Gah.

[Kim]

What version of Zen Cart?

[Mark Kidd]

What version of Zen Cart?

1.3.8a - sorry not to have included that in the OP. I guess my heart rate is still a little high.

[Kim]

Should we ask who the host is? Make sure you are the file owner too.

[Mark Kidd]

I have been able to get CSS working right by some blunt surgery to /includes/.htaccess, but I'm still puzzled over the permissions warning.


edit: This is running on a VPS, so I suppose I only have myself to blame if there is a configuration mistake with the server. I do however have a server administration package so I can get some help if need be.

In answer to your second question, I'll see if a chown to my cpanel/ftp login and then a permissions change will make a difference.


edit2: Chowning and reapplying permissions doesn't seem to make a difference.

[Mark Kidd]

ls -l configure.php


-rw-r--r-- 1 (my user name) (my user name) 3180 Sep 7 16:28 configure.php

[Website Rob]

Setting permissions to 444 will solve the problem but you cannot use your FTP program to make the change. Try using your Hosting Control Panel.

[Stuff4Toys]

YUP, I did the same thing.

If you have cPanel, go to the File Manager and "Change Permissions" to 444

That'll fix it.
JOhn ><>