Help on Permissions

[hatcher]

Hi All

Warning: I am able to write to the configuration file: /home/bestonco/public_html/shop/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance.

This is what I get at the top on my main_page. Can I change it? I used Filezilla to changeMod the perms to 644 as it says but then I have no permission to actually look at the page myself???

Can someone with a better brain than mine please shed some light for me.

Kind regards


Andy

[kobra]

Post a url to this

You shoul be changing only the configure.php permissions and this should not restrict the access to the shop...

What type of server Linux or win and other details

[wtwolf6]

I have the same issues.

I use windows 2003 sp2 with IIS and plesk, I use avast firewalls and scanners,
The user control is set to read only, the system account and the other user ids for things like the plesk user etc can but I can not change those.



This is my personal server so contacting my server admin is not a option as I am the administrator. I have tried using the plesk ftp interface but that did not work either. It shows public permissions on this file is read only

I even wrote a short php script to write to the config file and it gives me errors of wright permissions so I am very lost at the moment

I also check with the installer and it shows the files is not writable




and this is what it shows at the top



What permissions does the index read?
I also use a paid subscription of avactis shopping cart on a another site, It did the same thing, but everything was set properly.
Avactis support fixed the issue, I am not sure what they did, I know it was not file permissions, the only thing I noticed was a functions file was about 20 kb smaller then it was before the error so I assume they removed some code.

Can I remove the call that looks for this permission or should I do something else?

[gjh42]

Did Avactis make your other site's files secure, or did they just remove the warning?

[wtwolf6]

Honestly Im not sure what they did,
I have tried to write to the config file in that folder and it doesnt write to it,
I also tried a input code that would write to it in a submit form but it didnt do it,
As stated they did not change any user permissions on the folder or files that I can tell using right click security, so I assume all they did was remove the coding but again I can not write to the config file for avactis.

[wtwolf6]

what file does the check i have searched a few but can not find it,

[gjh42]

There's no point in removing the check or the warning. That will not make you secure, it will just let you forget that you are not secure.

[kobra]

I have tried to write to the config file in that folder and it doesnt write to it,

Not sure what you are using to do this with??

Usually, one has FTP access and a FTP client and transfers a file to be edited to their local and makes the edits, saves and FTP's the file back to the server.

If this is not what you are doing try it this way

[wtwolf6]

My files are not writable from the web,
I have tried using a simple php script on my server to write to the config file and it is not writable,
Which means this warning is not correct.
The file can not be written too.

I did not edit any files the installer did the initial set up thats why it had write privilages.

Now the file doesnt have write privlages since the install is over.

My files are secure the index is calling a false write on the files and the files CAN NOT BE WRITTEN TO.

My site is secure, the files can not be written to so I want to remove the security check on the index,

Where do I do this?
I got a domain thats been sitting there for nothing since this is a error that is not verifiable.
The error is wrong the includex configure.php file is not writable only readable I am not a beginner on this and deal with file permissions every day.

The file permissions are set correctly on the configure.php but the index says it is writable. It is not.

I even tried doing this on another domain with the same files ftp to my pc and re uploaded to the server it gives the same error and no permissions where changed.

The permissions on the domain or web users is read only to the file

server side permissions



domains permissions




Now these are the system permissions that I can not change

This control my ftp permissions If I change them then I can not delte edit write over etc any files using my ftp clients.



And these are the system permissions required by plesk to all files
If I change either of these 2 permissions the site goes offline



and system permissions




So the permissions are set correctly for file security again Using a file I uploaded via ftp that does basically the same thing when called by a browser the install does by writing over the configure.php file on the server.
This script gives me write error suchs as I can not write to file specified which means the files is secure.
The zencart scripts are either A reading the wrong permissions or B does not read permissions right on a windows server

This is a windows server.
Where is the code that checks permissions located so I can remove it.
All files are secure so I am no worring about this as it is a simple error in zens scripts.
Not my server permissions.
Permissions for web server and domain are set correctly

[gjh42]

This sounds like a question for DrByte.

With tens/hundreds of thousands of installations, I think it unlikely that such a visible problem would be happening on windows servers generally; there may be some quirk of your situation that is causing this.

And I don't know where that code is any more than you do.