Read only Config?

[Max Mini]

We just finished installed the cart. At the end it said:

"For security, you will need to reset your configure.php files located in the /admin/includes/ and /includes/ folders back to read-only mode before allowing people to access your store."

Do they mean to change the CHMOD or to do something else?

If it's the CHMOD, then what should we change those file to?

[Kim]

Yes CHMOD is needed, depending on your server, either 644 or 444.

[Max Mini]

OK thanks kim. We asked because we already CHMODed the files, but the red warning message still appears...

[DrByte]

if 644 isn't low enough, try 444. If your FTP program won't set 444 (because your host has limited this action), then go to your hosting control panel and use its file-manager tool to set permissions to read-only


And then proceed to the rest of security recommendations:
http://www.zen-cart.com/wiki/index.p...ecommendations

[Max Mini]

Yes we tried both 444 and 644. Both had the same results

All changes were made by using both the FTP client, AND the hosting control panel. Both had the same results

The other security measures have already been made.

[DrByte]

Well, the error message means that PHP on your webserver is able to write to the files if it wants to. That means if someone on another account on your server writes a rogue script to change that file on you, you might be somewhat unhappy. Hence the warning.

You will need to talk to your host about how to make that file non-readable by PHP. Or maybe they will provide some other information confirming whether they have some other security measures in place to protect you regardless of the setting.

Are you hosting on Windows or Linux? (I know you posted in the Linux forum, but just confirming whether there is a mismatch in terminologies and technologies.)

[Max Mini]

I am pretty sure it's Linux, but we had this same thing happen to us once before and there was something that we did that was easy that fixed it. For the life of me right now I can't remember what it was though. Maybe I can find my old thread here wich talked about it. If I do I'll post the link for someone else who might read this thread.

[Max Mini]

Well the good news is I found the thread. It is located here. The bad news is it doesn't tell us what we did to fix it