Help on Permissions

[gjh42]

Did Avactis make your other site's files secure, or did they just remove the warning?

[wtwolf6]

Honestly Im not sure what they did,
I have tried to write to the config file in that folder and it doesnt write to it,
I also tried a input code that would write to it in a submit form but it didnt do it,
As stated they did not change any user permissions on the folder or files that I can tell using right click security, so I assume all they did was remove the coding but again I can not write to the config file for avactis.

[wtwolf6]

what file does the check i have searched a few but can not find it,

[gjh42]

There's no point in removing the check or the warning. That will not make you secure, it will just let you forget that you are not secure.

[kobra]

I have tried to write to the config file in that folder and it doesnt write to it,

Not sure what you are using to do this with??

Usually, one has FTP access and a FTP client and transfers a file to be edited to their local and makes the edits, saves and FTP's the file back to the server.

If this is not what you are doing try it this way

[wtwolf6]

My files are not writable from the web,
I have tried using a simple php script on my server to write to the config file and it is not writable,
Which means this warning is not correct.
The file can not be written too.

I did not edit any files the installer did the initial set up thats why it had write privilages.

Now the file doesnt have write privlages since the install is over.

My files are secure the index is calling a false write on the files and the files CAN NOT BE WRITTEN TO.

My site is secure, the files can not be written to so I want to remove the security check on the index,

Where do I do this?
I got a domain thats been sitting there for nothing since this is a error that is not verifiable.
The error is wrong the includex configure.php file is not writable only readable I am not a beginner on this and deal with file permissions every day.

The file permissions are set correctly on the configure.php but the index says it is writable. It is not.

I even tried doing this on another domain with the same files ftp to my pc and re uploaded to the server it gives the same error and no permissions where changed.

The permissions on the domain or web users is read only to the file

server side permissions



domains permissions




Now these are the system permissions that I can not change

This control my ftp permissions If I change them then I can not delte edit write over etc any files using my ftp clients.



And these are the system permissions required by plesk to all files
If I change either of these 2 permissions the site goes offline



and system permissions




So the permissions are set correctly for file security again Using a file I uploaded via ftp that does basically the same thing when called by a browser the install does by writing over the configure.php file on the server.
This script gives me write error suchs as I can not write to file specified which means the files is secure.
The zencart scripts are either A reading the wrong permissions or B does not read permissions right on a windows server

This is a windows server.
Where is the code that checks permissions located so I can remove it.
All files are secure so I am no worring about this as it is a simple error in zens scripts.
Not my server permissions.
Permissions for web server and domain are set correctly

[gjh42]

This sounds like a question for DrByte.

With tens/hundreds of thousands of installations, I think it unlikely that such a visible problem would be happening on windows servers generally; there may be some quirk of your situation that is causing this.

And I don't know where that code is any more than you do.

[DrByte]

The zencart scripts are either A reading the wrong permissions or B does not read permissions right on a windows server

This is a windows server.
Where is the code that checks permissions located so I can remove it.
All files are secure so I am no worring about this as it is a simple error in zens scripts.
Not my server permissions.
Permissions for web server and domain are set correctly

It must be a PHP thing on your server then.

This is what Zen Cart does:

  if ( (file_exists(dirname($_SERVER['SCRIPT_FILENAME']) . '/includes/configure.php')) 
    && (is_writeable(dirname($_SERVER['SCRIPT_FILENAME']) . '/includes/configure.php')) ) {
   // give alert
  } 

Basically, that says:
- if the /includes/configure.php file EXISTS (file_exists())
AND
- if PHP sees the file as WRITABLE (is_writable())
THEN
- give the warning message

If you're convinced that the message is wrong, just add an extra file to your /includes/extra_configures folder:
- call it "bypass_config_warning.php"
-inside it, put this one line:

<?php define('WARN_CONFIG_WRITEABLE', 'false'); ?>

That'll tell Zen Cart to ignore the fact that PHP thinks it's writable and rely on you to ensure that it's safe.
The security is then ENTIRELY UP TO YOU ... be sure to double-check permissions after any and every edit. Zen Cart will no longer give you any warnings on the issue.