Chmod 775 is worked for installation or not?

[icemanchai]

If the web hosting company stated that "File permissions higher than 775 will not work", can the Zen Cart be installed on the server and run correctly such as upload somethings or upgrade, etc.?

[DrByte]

You can set permissions to 755 and Zen Cart will work fine.... with a few limitations.

The things that will not work are:
- uploading product/category images VIA THE ADMIN when editing products/categories
- uploading music files to media manager via the Admin
- Define Pages Editor in Admin
- product downloads via redirect
- file-based session/query caching (have to use the default of "database" instead)
- admin banner statistics graphs won't be saved
- admin database-backup scripts won't be usable... have to use phpMyAdmin for backups instead

[icemanchai]

Thanks DrByte. I want to clarify that

1. Chmod 755 has the same limitation of Zen Cart as what I asked for chmod 775 ? Or less limitation for chmod 775?

2. for doing without limitation you need to change permission of files (the same as all stated in FAQ for installation to 777) to 777 every time I require to eg. upload image?

3. after that, do I need to change them all to lower permission such as 644 for security?

4. "- admin banner statistics graphs won't be saved" means the files related to this cannot be set permission below 777 if I require this to work? Any security concern?

5. "file-based session/query caching (have to use the default of "database" instead)" means what? Need to setup or it will do automatically?

Maybe too many questions..... ...please help, thank you.

[DrByte]

1. 755, 775, 715, as long as the last digit is not a 7, you have the limitations.

2. yes. ... or use FTP to upload your image and then manually set the image name after the fact by re-editing the product.

3. yes, that's a good idea

4. if you don't care about storing the graphs which show banner-display stats, you don't need to worry about this. As to security, any file/folder set to 777 is at risk of exposure to hackers if you're on a shared-hosting setup.

5. During setup, you have the option of choosing a caching type. It defaults to "db" for sessions, and "none" for sql queries. Keeping the defaults is always recommended, and is most secure.

[icemanchai]

Thank you very much for your detail explanation.