Thread: permissions

Results 1 to 2 of 2
  1. #1
    Join Date
    May 2009
    Posts
    1,219
    Plugin Contributions
    2

    Default permissions

    Just installed 1.5.7b, and noticed there was no mention of setting directory permissions, and to only check the configure files to have restricted permissions.
    I checked to see the permissions were correct, and noticed that while the includes/configure.php had a 444 the admin/includes/configure.php had a 664, don't know if something didn't go as it should have, and I set that too to 444.

    Is this correct?

    Thank you.

  2. #2
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: permissions

    If you wish to enforce deeper security by making your configure.php files restricted, you're welcome to do so.

    In the past most of the instructions around "you gotta make these 7 directories writable" was because of older approaches to how PHP would run on servers, where PHP couldn't write to files it didn't create in the first place. Most modern servers don't have those same limitations.
    If you want to test yours, use the admin Define Pages Editor to change a file. And try uploading images for products via the admin. And if you're allowing customer uploads via attributed products, test that. If you run into issues there, make the requisite folders/files writable on a broader level.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v151 Permissions
    By jfuller in forum Installing on a Linux/Unix Server
    Replies: 3
    Last Post: 22 Jan 2013, 04:16 PM
  2. permissions
    By neilowens in forum Installing on a Windows Server
    Replies: 2
    Last Post: 9 Jul 2007, 05:39 PM
  3. permissions
    By wwwben in forum General Questions
    Replies: 2
    Last Post: 15 Mar 2007, 05:10 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR