Override CHMOD warning

[Splash]

I have configure.php from the /includes/ directory already set to CHMOD 644 (and the same thing happens with CHMOD 444), but I still get this message on the top of my store.

Warning: I am able to write to the configuration file: /home/.noleen/storeowner/store.pmsinfirm.org/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance. See this FAQ

from https://www.zen-cart.com/tutorials/index.php?article=90
On the bottom of the page, it links to a topic for overriding the warning and it links to http://www.zen-cart.com/forum/showpo...63&postcount=8 , which I can't access. HELP PLEASE!

[Get Em Fast]

Splash, are you using your cPanel to CHMOD, as instructed?

The post you referred to has most likely been deleted due to the danger of overriding that feature......NOTE: Overriding the display of the message may give you a false sense of security.

[Splash]

yes it's already set on 644 through the cPanel...

My webhost is dreamhost, if that matters at all.

[mprough]

Set it to 444 in your cpanel, not 644


~Melanie

[Splash]

Set it to 444 in your cpanel, not 644


~Melanie

I already said the same thing happens with 444. :\

[mprough]

You did not answer that you set it to 444 in your cPanel. With your host you cannot set to 444 in FTP.

So to verify in

includes/

you set configure.php to 444 in your filemanager (not the legacy filemanager either)

Then refresh your website with a control + F4

~Melanie

[Splash]

Ah, I see what you mean now. That method worked. Thank you.

Is there a reason why it doesn't work the way it should?

[mprough]

Actually, it does work exactly how it should.... If you can set file to be not writable in FTP... then you can unset them as well

So for security they are set this way.

~Melanie

[Splash]

Ah, I see there too. No one else is getting FTP access for this store anyway.

[mprough]

Sometimes, they "get" access, w/o being granted access... Just an added layer of protection for your DB info.


~Melanie