Page 2 of 4 FirstFirst 1234 LastLast
Results 11 to 20 of 37
  1. #11
    Join Date
    Sep 2007
    Posts
    178
    Plugin Contributions
    0

    Default Re: SysCheck [support thread]

    Just did a fresh install of 1.3.8, downloaded directly from Zen-Cart.com. Also installed several mods, including Syscheck.

    When I run SysCheck, it is giving me a long list of directories under the heading Directories with incorrect permissions, all showing (0777).

    Further down the page, there is an even longer list, probably in the hundreds, under the heading, FILES WITH INCORRECT PERMISSIONS, all showing (0666).

    Are there really that many incorrect permissions on my files/folders??? Or am I looking at this wrong???

    Oh, my server is also a Windows IIS.

    Thanks for any help,

    Rick

  2. #12
    Join Date
    Feb 2006
    Location
    Tampa Bay, Florida
    Posts
    7,510
    Plugin Contributions
    102

    Default Re: SysCheck [support thread]

    Quote Originally Posted by RFree190 View Post
    Are there really that many incorrect permissions on my files/folders???
    Yes.

    https://www.zen-cart.com/tutorials/index.php?article=9
    That Software Guy. My Store: Zen Cart Modifications
    Available for hire - See my ad in Services
    Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.

  3. #13
    Join Date
    Sep 2007
    Posts
    178
    Plugin Contributions
    0

    Default Re: SysCheck [support thread]

    OK, Instead of asking which folders should NOT have 777, I'll ask which should. I am thinking there are a few that need it for uploads. What is the correct permission for the rest? 644?

    Same question for the files. Which NEED 666 and what should the others be set to???

    My site is running on Windows IIS and I don't have access to cPanel or anything similar, so I want to make my email to sysop very clear on what needs changed.

    Thanks for your help!

    Rick

  4. #14
    Join Date
    Sep 2009
    Location
    California
    Posts
    148
    Plugin Contributions
    0

    Default Re: SysCheck [support thread]

    Quick question - running SysCheck, the first section 'Hosts accessing Admin' - this lists IP addresses... and yes, mine and my business partners show fine, even my mobile ip. But, in the last day I've had three IP's from IP's on the other side of the planet.

    My admin sub-dir is quite long (35+ characters) and diverse in its naming - the questionis: are these ip's 'successful' logins, or just that they found out the name of the admin folder and are trying various hack attacks?!? If that latter, is it preventable or is the admin folder name always going to be found?

    Just curious.

  5. #15
    Join Date
    Feb 2006
    Location
    Tampa Bay, Florida
    Posts
    7,510
    Plugin Contributions
    102

    Default Re: SysCheck [support thread]

    They are entries in the admin_activity_log table; you can browse that table in phpMyAdmin looking for those IPs to see what pages they hit.
    That Software Guy. My Store: Zen Cart Modifications
    Available for hire - See my ad in Services
    Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.

  6. #16
    Join Date
    Jul 2008
    Posts
    362
    Plugin Contributions
    0

    Default Re: SysCheck [support thread]

    I just installed this mod and tried to access it through the admin but i keep getting sorry your security clearance does not allow you to access.... I updated the permissions for my log in but it still doesnt work and when i went back to check it it was unticked again. ANy help would be great. Thanks

  7. #17
    Join Date
    Apr 2008
    Posts
    351
    Plugin Contributions
    4

    Default Re: SysCheck [support thread]

    Quote Originally Posted by gee38l View Post
    I just installed this mod and tried to access it through the admin but i keep getting sorry your security clearance does not allow you to access.... I updated the permissions for my log in but it still doesn't work and when i went back to check it it was unticked again. ANy help would be great. Thanks
    Do you also have the Admin Profiles Mod? If so, you need to go to Tools/Admin Settings in your Admin Screen and look for unchecked boxes. When you install a new mod and run it the first time, it gets added to the Admin Profiles mod. You then have to go give yourself access to it by checking the appropriate box. Then when you are done, click the UPDATE button to SAVE the changes.

  8. #18
    Join Date
    Mar 2008
    Location
    QLD - Aussie
    Posts
    192
    Plugin Contributions
    0

    Default Re: SysCheck [support thread]

    Hi
    I've just installed this mod - thank you swguy

    I'm pretty sure that it's installed correctly,
    I ran the script via my admin panel - it seemed to take a very long time to load (is that correct behavior?)

    I did eventually get a display which outlined:

    • Hosts accessing Admin
    • Admin users

    and this 'Fatal Error':
    Fatal error: Maximum execution time of 60 seconds exceeded in /clientdata/clients/p/a/*MYSITE*/www/*MY ADMIN*/includes/functions/extra_functions/syscheck.php on line 29

    Also - one of my "hosts accessing admin" is 204.236.235.245 -> ec2-204-236-235-245.compute-1.amazonaws.com

    Does anyone know what this is? I have all the patches etc, and have changed my admin name; has my site been compromised?

    Many thanks & any advice would really be appreciated, as I'm really worried

  9. #19
    Join Date
    Feb 2006
    Location
    Tampa Bay, Florida
    Posts
    7,510
    Plugin Contributions
    102

    Default Re: SysCheck [support thread]

    If it's timing out, you will need to run the tests in smaller groups, maybe one at a time. In admin/syscheck.php around line 41, there are a series of flags set to true. Set them all to false, and then set them to true one by one so you can run different tests one at a time.
    That Software Guy. My Store: Zen Cart Modifications
    Available for hire - See my ad in Services
    Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.

  10. #20
    Join Date
    Mar 2008
    Location
    QLD - Aussie
    Posts
    192
    Plugin Contributions
    0

    Default Re: SysCheck [support thread]

    Thanks for your reply.
    Following your suggestion, ran the tests one-by-one. Got a result for all except for 'Directories with incorrect permissions' (timed out to a blank page) and 'PHP files with contain unexpected calls to Eval' (Fatal error as before)

    I even downloaded the files afresh & uploaded them to my site & result the same.

    Hmmm not sure what I am doing wrong

    Also - do you have an opinion about the entry in the "hosts accessing admin"?
    204.236.235.245 -> ec2-204-236-235-245.compute-1.amazonaws.com
    Thank you sooo much & have a great day or evening (is morning here)

 

 
Page 2 of 4 FirstFirst 1234 LastLast

Similar Threads

  1. v151 Ship2Pay Support thread
    By Design75 in forum All Other Contributions/Addons
    Replies: 9
    Last Post: 5 Nov 2019, 01:14 PM
  2. Hebrew Support - new release [Support Thread]
    By eranariel in forum Addon Language Packs
    Replies: 12
    Last Post: 9 Oct 2019, 09:32 PM
  3. Wordpress On ZC [Support Thread]
    By hira in forum All Other Contributions/Addons
    Replies: 1858
    Last Post: 17 Jan 2014, 01:24 AM
  4. ZJ Silver Support Thread
    By anthonyd in forum Addon Templates
    Replies: 220
    Last Post: 5 Nov 2010, 03:30 PM
  5. ZJ Black 2 support thread
    By Liamv in forum Addon Templates
    Replies: 1
    Last Post: 15 Feb 2010, 02:53 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR