Permission for configure.php file

[Laki]

Hi,

I set "777" permission on configure.php file during Zencart 1.5.4 installation as mentioned in the installation guideline. A default value was "444". Is there any security concern with my current settings (777) and based on that should I keep it or revert to the origin value?

Many thanks,
Laki

[kobra]

Yes reset it to 444 after you have made any edits to it or installation is complete
777 allows anybody that is interested to see what the file contains like passwords to your DB

[RodG]

Yes reset it to 444 after you have made any edits to it or installation is complete
777 allows anybody that is interested to see what the file contains like passwords to your DB

To the OP: The advice to reset to 444 is correct. The implication that permission 777 is a security risk is also correct. The reason given here is incorrect though.

Cheers
RodG

[Laki]

I understand this advice to set permission to 444 is for include/configure.php. Would you also set 444 permission for admin/includes/configure.php file?

Many thanks.

[mc12345678]

I understand this advice to set permission to 444 is for include/configure.php. Would you also set 444 permission for admin/includes/configure.php file?

Many thanks.

I would/do... If editing in the future is required change to 644 on the files prior to the edit and restore to 444 after the edit.

[Laki]

Thanks guys for useful advice.