don't see configure.php file in Includes folder

[abneb217]

Hi,

New here....just uploaded the latest version of Zencart to my server and did the install - everything seems to have gone well. I'm able to login to the admin area.
However, when I browse to the store, I see a warning in red on top saying:

"Warning: I am able to write to the configuration file: ...../includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical)."

When I check the Includes folder (via ftp client), I do not see a configure.php file there. I found one in ...../admin/includes but that one is already set with 644 .

Any ideas?

TIA.

[schoolboy]

For this error message to occur, it has to be there... (Did you change dist_configure.php to configure.php after you loaded up the software?)

[abneb217]

... i just re-read the installation document again more carefully and apparently i skipped the step of renaming dist_configure.php to configure.php before the installation.
is there any way to fix this?

[schoolboy]

Does dist_configure.php exist on your server? If so, try re-naming it to configure.php.

You can try setting CHMOD to 444 via FTP, but it's better to do this via your domain host control panel (CPanel).

[abneb217]

ok, not sure why (maybe i needed to refresh the view on the FTP client, though I'm pretty sure I disconnected & reconnected a few times) but now I see configure.php & dist-configure.php in the Includes folder.
I changed the permissions on both to 444 and the error message is gone ....THANKS.

is it ok to leave both files there?

[schoolboy]

but now I see configure.php & dist-configure.php in the Includes folder.

get rid of dist_configure.php as soon as you can... It could pose a security risk if the data it contains is the same as your configure.php file.