Still having problems with CHMOD permissions

Hi,

https://www.empiregametore.co.uk/zencart

I'm still getting the message: Warning: I am able to write to the configuration file: /home/fhlinux219/e/empiregamestore.co.uk/user/htdocs/zencart/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical).

It is set by default to 644 which from my reading of the warning it could either be 644 or 444 and be ok? Anyway I tried to switch to 444 to see if that makes any difference. But it will not stay at 444. I contacted my host as there was no Control panel option to switch it at the host.

They replied: Thank you for your query

It is likely you cannot change the permissions to 444 so it will revert back to 644. Unfortunately that will be a limitation of the shared hosting you are using.

If you require to change the permissions to 444 then maybe you require a dedicated server not a shared server.

Unfortunately we don't offer any support for your website contents or scripting so this will be something you will need to resolve yourself.

Sorry we cannot be more useful this time around.

Kind Regards,
StreamlineNet
Streamline.Net - The home of good value web hosting

We hope you had a nice weekend.

So basically I cant switch it to 444. However, is this really the problem as it is set to 644 which the warning message says it can be as well?

Not really sure where to go from there.

No control panel - disturbing
Blatant attempt to move to more expensive server - Frightening
Other qualified hosts available - priceless.

Hi, can you FTP into your account, if you can then simply change the permissions of the file to 444, i assume you know how to do this !, if your hosting company won't allow you to do this then basically tell them that you need it, I've used shared hosting before and never been a problem! There's no reason why they should refuse, and if they still refuse, change hosting company, if they won't let you change CHMOD'd on your files you really need a host that will, good luck and keep us posted !

Cheers
J#xx

IF the site is on any kind of properly protected server, it won't allow permission changes by FTP.

???
All sites offer the choice of FTP, if they don't there's something dodgy.

Property protected, change Hosting !!

didn't say they did not have FTP. Just said allowing FTP to CHMOD is not good and won't pass PCI compliance. Anonymous FTP and FTP CHMOD should be off.

Hi, every server I have ever encountered allows total FTP and Permission access, if there's servers that don't allow, then you got me on that one Dbltoe, but it seems to me that if hosting restricts stuff like that then where do you go ?

Also I got 25, 14 year olds having a party right next door and I had no sleep since Wednesday, bear with me on this one !

Cheers
J#xx

Hey,

I've tried switching it with FTP, that was the first thing i tried. It was sujested that i would need to change it in control panel at my host. But it seems they don't have this option.

The real question is I guess. If its set to 644 shouldn't it be working anyway and not showing the error message as it does say "CHMOD 644 and 444 are typical"

Not hassling, just explaining for those contemplating hosting and thinking about changing.

The fact that 644/444 is involved here versus 755, says Linux and it is very common to not be able to CHMOD by FTP as it should be done in a control panel whether plesk, cp or something else.

I believe the ability to edit 444 files, change their permissions or make 444 permissions is limited for the purpose of security, specifically PCI compliance.

Haven't you a file manager icon in your control panel? Should be able to do it there w/o issue.

~Melanie

mprough:

I believe the ability to edit 444 files, change their permissions or make 444 permissions is limited for the purpose of security, specifically PCI compliance.

Haven't you a file manager icon in your control panel? Should be able to do it there w/o issue.

~Melanie

Hi, as i mentioned in my original post there is no control panel/file manager option. Which is why i contacted my host to ask about it. From which you can see their reply basically saying that it wasn't possible or available. I'm still trying to find out if it being set to 644 is causing the error message despite it saying 644 or 444 are typical.

cloakvai:

Hi, as i mentioned in my original post there is no control panel/file manager option. Which is why i contacted my host to ask about it. From which you can see their reply basically saying that it wasn't possible or available. I'm still trying to find out if it being set to 644 is causing the error message despite it saying 644 or 444 are typical.
Yes the error is due to the 644... it needs to be 444

Maybe your host can be bothered to do it, as they haven't given you the tools to do so?

~Melanie

mprough:

Yes the error is due to the 644... it needs to be 444

Maybe your host can be bothered to do it, as they haven't given you the tools to do so?

~Melanie

Ok, well at least i know now. Thanks.

From their email I think they are telling me that I can't do it and they won't do it. Looks like i'll have to email them again and ask them why they can't switch it themselves. :shocking:

Problem fixed.

For anyone else haing similar problems with streamline.net or other server who may read this. Despite them saying its not possible to do, or will not help you.

You need to enable SSH on your server. Then use a program like PUTTY (free program) to manually change the permisions. This is quite complicated though unless you take some time to read the doccumentation or know old style dos commands.

Why the host couldn't have just said you need to do it in SSH and pointed me in the correct direction rather than try and tell me its not possible I have no idea....