Problems After Setting Up My SSL Cert

[sad1968]

I am in the process of configuring a Zencart and I have ran into a little issue since I made changes in order to get my zencart admin site and my customer interfaces pointing towards my SSL Cert. Ever since I made the recommended configuration changes I have the following warning at the top of my shopping cart when I browse to it.

Warning: I am able to write to the configuration file: /home/content/n/u/t/nutt1/html/zencart/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance.

I am not a programmer and when I look at the files that I modified to get my SSL Cert working certain pages on the site I see nothing that the above warning is referring to in my zencart.

[DrByte]

Warning: I am able to write to the configuration file: /home/content/n/u/t/nutt1/html/zencart/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance.

You need to make the configure.php files read-only again after editing them.
Use your FTP program to set the permissions, or if your hosting account includes a File Manager tool, use that. If you need help for your specific server, you'll need to talk to your hosting company for assistance.

[sad1968]

I am unaware of changing the files from read only to write. When I edited the files all I did was connect to my site with Filezilla, I then went into the Zencart folder and found the files that I needed to edit.

I then FTP those files to separate folders on my PC opened each one up and made the appropriate changes to each. I then FTP them back into the appropriate zencart directory with Filezilla.

From my perspective I just edited the files in the spots that I was told to and then pushed them back out to the server.

How do I make these changes? I am using GoDaddy as my hosting company and they don't support Zencart since it is third party software.

I have uploaded the two files that I made changes on and have an explanation on each of them at the very top explaining the directory that they came from on my web server.

Any insight as to what I need to change in the attached files to make them read only again would be great or is it something that I need to change somewhere else inside Zencart to fix this issue.

Help please.....


NOTE this file is located in the following directory on my server: /zencart/includes/configure.php

<?php
/**
 *
 * @package Configuration Settings
 * @copyright Copyright 2003-2006 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 */


/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
/***************       The 2 files should be kept separate and not used to overwrite each other.      ***********/

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  define('HTTP_SERVER', 'http://www.thehealthynutt.com');
  define('HTTPS_SERVER', 'https://www.thehealthynutt.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', '/zencart/');
  define('DIR_WS_HTTPS_CATALOG', '/zencart/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
  define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

  define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
  define('DIR_FS_CATALOG', '/home/content/n/u/t/nutt1/html/zencart/');

  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
  define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
  define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
  define('DB_TYPE', 'mysql');
  define('DB_PREFIX', 'zen_');
  define('DB_SERVER', 'p3smysql33.secureserver.net');
  define('DB_SERVER_USERNAME', '*********');
  define('DB_SERVER_PASSWORD', '*********');
  define('DB_DATABASE', '*******');
  define('USE_PCONNECT', 'false'); // use persistent connections?
  define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

  // The next 2 "defines" are for SQL cache support.
  // For SQL_CACHE_METHOD, you can select from:  none, database, or file
  // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
  // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
  // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
  define('SQL_CACHE_METHOD', ''); 
  define('DIR_FS_SQL_CACHE', '');

?>

NOTE this file is in the following directories on my server: zencart/admin/includes/configure.php

<?php
//
/**
 *
 * @package Configuration Settings
 * @copyright Copyright 2003-2006 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 */


/*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/
/***************       The 2 files should be kept separate and not used to overwrite each other.      ***********/

// Define the webserver and path parameters
  // Main webserver: eg, http://localhost - should not be empty for productive servers
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  // HTTP_CATALOG_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_CATALOG_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  /* 
   * URLs for your site will be built via:  
   *     HTTP_SERVER plus DIR_WS_ADMIN or
   *     HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or 
   *     HTTP_SERVER plus DIR_WS_CATALOG or 
   *     HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
   * ...depending on your system configuration settings
   */
  define('HTTP_SERVER', 'http://www.thehealthynutt.com');
  define('HTTPS_SERVER', 'https://www.thehealthynutt.com');
  define('HTTP_CATALOG_SERVER', 'http://www.thehealthynutt.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.thehealthynutt.com');

  // Use secure webserver for catalog module and/or admin areas?
  define('ENABLE_SSL_CATALOG', 'true');
  define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_ADMIN', '/zencart/admin/');
  define('DIR_WS_CATALOG', '/zencart/');
  define('DIR_WS_HTTPS_ADMIN', '/zencart/admin/');
  define('DIR_WS_HTTPS_CATALOG', '/zencart/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
  define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
  define('DIR_FS_ADMIN', '/home/content/n/u/t/nutt1/html/zencart/admin/');
  define('DIR_FS_CATALOG', '/home/content/n/u/t/nutt1/html/zencart/');

  define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
  define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
  define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
  define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

// define our database connection
  define('DB_TYPE', 'mysql');
  define('DB_PREFIX', 'zen_');
  define('DB_SERVER', 'p3smysql33.secureserver.net');
  define('DB_SERVER_USERNAME', '*******');
  define('DB_SERVER_PASSWORD', '*******');
  define('DB_DATABASE', '*******');
  define('USE_PCONNECT', 'false'); // use persistent connections?
  define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

  // The next 2 "defines" are for SQL cache support.
  // For SQL_CACHE_METHOD, you can select from:  none, database, or file
  // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
  // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
  // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
  define('SQL_CACHE_METHOD', ''); 
  define('DIR_FS_SQL_CACHE', '');

?>

[tophand]

You need to remove the files and change your passwords ASAP!
Always remove the info like your password before posting.

[DrByte]

The following information in both of your files should not be empty:

  define('SQL_CACHE_METHOD', ''); 
  define('DIR_FS_SQL_CACHE', '');

I suspect the correct information should be this:

  define('SQL_CACHE_METHOD', 'none'); 
  define('DIR_FS_SQL_CACHE', '/home/content/n/u/t/nutt1/html/zencart/cache');

When you're done editing the files, make sure they're marked as read-only on the server -- then the warning should go away.
In FileZilla, you can right-click on the file, choose "File Attributes..." from the menu, and set the permissions appropriately.

[sad1968]

I still can't figure this out for the life of me. All I have done is go in and change the following lines in my /store/includes/configure.php file;

define('HTTP_SERVER', 'http://www.thehealthynutt.com');
define('HTTPS_SERVER', 'https://www.thehealthynutt.com');

define('ENABLE_SSL', 'true');


and in my /store/admin/includes/configure.php file;

define('HTTP_SERVER', 'http://www.thehealthynutt.com');
define('HTTPS_SERVER', 'https://www.thehealthynutt.com');
define('HTTP_CATALOG_SERVER', 'http://www.thehealthynutt.com');
define('HTTPS_CATALOG_SERVER', 'https://www.thehealthynutt.com');

define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

Nothing else, I then upload the files back to the server and I get this damn warning screen when I point to my shopping cart

Warning Warning: I am able to write to the configuration file: /home/content/n/u/t/nutt1/html/store/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance.

What in the Hell am I doing wrong and I do I fix this, I cannot find any place to set my file to read only. I never changed it to begin with, I have been trying to fix this for a week now and I am getting very disgusted with this. This can't be that difficult, I am sure I can't see the forest for the trees.

Be that as it may I still need some guidance as to how to change this, I have even called GoDaddy support and they don't know what I am talking about in addition to not supporting third party software like Zencart.

Let me just add when I put the original files back in place I still get the same issue. Is this something that is changed in the background without me even knowing it?

Please help, EXTREMELY FRUSTRATED

[DrByte]

Are you using an FTP program on your PC in order to upload those files to your server?

If so, then ... after you upload the files, right-click on them and choose the appropriate option to view the file permissions/attributes/settings.
From that menu, mark the files read-only and save the changes.

https://www.zen-cart.com/tutorials/i...hp?article=148
https://www.zen-cart.com/tutorials/index.php?article=90

[tophand]

Maybe a image will help.
With my FTP program when I right click on the file from the menu I choose "Properties".
Whatever it is properties/permissions/attributes/settings you click on you should get a box like the one in the image.

HTH,
M

[sad1968]

I finally got it to work, thanks for all the help, I won't forget how I fixed this.

Just in case you were wondering I am using filezilla, I had to connect to the web server and then I right clicked on the files that I were in write mode and went to file attributes and inside the box I made sure that all attributes were set to read only.


Thanks again for all the hlep.

[dbltoe]

Just a few words of friendly advice to help you in the future.
You seem to not take the time to read the answers provided. No one here is going to jump down your throat when you have a problem but, you need to fully read the answer or some will become frustrated and quit helping.
Dr Byte answered your question in response #2. It's not unusual for folks new to Zen Cart to have questions about file permissions and FTP. It's not really the job of the forum to handle such things but the good folks (Like the Doc) do want to help.
You can help by reading the answer and maybe even entering some of the unfamiliar terms in Google to expand your knowledge.
Good luck in your endeavors. With Zen, we all learn something new every day.