Results 1 to 2 of 2
  1. #1
    Join Date
    Jun 2008
    Posts
    31
    Plugin Contributions
    0

    Default Godaddy migration permissions

    Hello friends,
    my host (godaddy) did some migration, and when I checked my site, there was a zen banner notifying security issues with permissions.
    seem like all permissions set to 705 while migrating. after some fiddling about the permissions, I went ahead and change the 2 configure files to 444 and it seem like everything works fine again.

    on the zen help file the recommendation is 777 for all files other then those 2.

    my question is if the 705 instead of the 777 for all files (other then the "configure") is a problem or I can leave it at that, as it seem to work fine?
    Last edited by coins; 13 Apr 2012 at 07:24 PM.

  2. #2
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: Godaddy migration permissions

    I think you're misreading the documentation. 777 is NOT recommended as a general rule. It's only used in temporary situations such as installation-time when one needs to make a file writable temporarily. After that, setting permissions to a lower value is important.

    Your configure.php files need to be set to a value that makes them read-only. Specifically they only need to be readable by the Apache/PHP process running on the server. Your hosting company can tell you what the correct value is for your particular server. Often 444 is used for that.

    BUT WAY MORE IMPORTANT THAN ALL OF THAT is the fact that you're using a VERY OLD version of Zen Cart with SERIOUS SECURITY PROBLEMS. You need to upgrade to a secure version ASAP.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v151 Can't Login in After Server Migration at GoDaddy
    By LindeeG in forum Basic Configuration
    Replies: 5
    Last Post: 21 Jan 2016, 03:59 PM
  2. migration
    By iceraven721 in forum Basic Configuration
    Replies: 1
    Last Post: 16 Jan 2011, 10:23 PM
  3. XAMPP to live-server (GoDaddy) migration
    By Kerygmata in forum General Questions
    Replies: 2
    Last Post: 16 Sep 2010, 05:21 AM
  4. migration
    By shipmatch in forum General Questions
    Replies: 2
    Last Post: 17 Oct 2007, 02:43 PM
  5. Migration Issues
    By Shawn Pauley in forum Templates, Stylesheets, Page Layout
    Replies: 7
    Last Post: 7 Aug 2006, 04:15 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg