Still having problems with CHMOD permissions

[cloakvai]

Hi,

www.empiregametore.co.uk/zencart

I'm still getting the message: Warning: I am able to write to the configuration file: /home/fhlinux219/e/empiregamestore.co.uk/user/htdocs/zencart/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical).

It is set by default to 644 which from my reading of the warning it could either be 644 or 444 and be ok? Anyway I tried to switch to 444 to see if that makes any difference. But it will not stay at 444. I contacted my host as there was no Control panel option to switch it at the host.

They replied: Thank you for your query

It is likely you cannot change the permissions to 444 so it will revert back to 644. Unfortunately that will be a limitation of the shared hosting you are using.

If you require to change the permissions to 444 then maybe you require a dedicated server not a shared server.

Unfortunately we don't offer any support for your website contents or scripting so this will be something you will need to resolve yourself.

Sorry we cannot be more useful this time around.

Kind Regards,
StreamlineNet
Streamline.Net - The home of good value web hosting

We hope you had a nice weekend.

So basically I cant switch it to 444. However, is this really the problem as it is set to 644 which the warning message says it can be as well?

Not really sure where to go from there.

[dbltoe]

No control panel - disturbing
Blatant attempt to move to more expensive server - Frightening
Other qualified hosts available - priceless.

[J#xx]

Hi, can you FTP into your account, if you can then simply change the permissions of the file to 444, i assume you know how to do this !, if your hosting company won't allow you to do this then basically tell them that you need it, I've used shared hosting before and never been a problem! There's no reason why they should refuse, and if they still refuse, change hosting company, if they won't let you change CHMOD'd on your files you really need a host that will, good luck and keep us posted !

Cheers
J#xx

[dbltoe]

IF the site is on any kind of properly protected server, it won't allow permission changes by FTP.

[J#xx]

???
All sites offer the choice of FTP, if they don't there's something dodgy.

Property protected, change Hosting !!

[dbltoe]

didn't say they did not have FTP. Just said allowing FTP to CHMOD is not good and won't pass PCI compliance. Anonymous FTP and FTP CHMOD should be off.

[J#xx]

Hi, every server I have ever encountered allows total FTP and Permission access, if there's servers that don't allow, then you got me on that one Dbltoe, but it seems to me that if hosting restricts stuff like that then where do you go ?

Also I got 25, 14 year olds having a party right next door and I had no sleep since Wednesday, bear with me on this one !

Cheers
J#xx

[cloakvai]

Hey,

I've tried switching it with FTP, that was the first thing i tried. It was sujested that i would need to change it in control panel at my host. But it seems they don't have this option.

The real question is I guess. If its set to 644 shouldn't it be working anyway and not showing the error message as it does say "CHMOD 644 and 444 are typical"

[dbltoe]

Not hassling, just explaining for those contemplating hosting and thinking about changing.

The fact that 644/444 is involved here versus 755, says Linux and it is very common to not be able to CHMOD by FTP as it should be done in a control panel whether plesk, cp or something else.

[mprough]

I believe the ability to edit 444 files, change their permissions or make 444 permissions is limited for the purpose of security, specifically PCI compliance.

Haven't you a file manager icon in your control panel? Should be able to do it there w/o issue.

~Melanie