Forums / Installing on a Linux/Unix Server / non-writable configure file being flagged as writable

non-writable configure file being flagged as writable

Locked

Views: 1,199

Results 1 to 2 of 2
This thread is locked. New replies are disabled.
20 Jan 2010, 12:37 AM
#1
schwimwastaken avatar

schwimwastaken

New Zenner

Join Date:
Aug 2005
Posts:
88
Plugin Contributions:
0

non-writable configure file being flagged as writable

Hi there everyone,

Linux server/apache 2.x

I had a server crash which required a few zen-cart installations to be restored. Upon restoring them from ftp backups(through cPanel), all zen-cart installs show the configure.php as being writable. Thinking it was something to do with ownership of the backup files, I downloaded the zips, unzipped them locally and uploaded the files. Same result. I wasn't too worried about it because I provisioned a new server and was moving the sites.

New site, I uploaded the files tonight, changed the paths in the configure files and db and visited via a browser. The first thing I see when visiting the front page of the shop is the notice that my configure.php file is writable.

I've uploaded them via ftp, so the owner of the file is the account user. I've tried 644 and 444 to the same result. I've installed zen-cart hundreds of time and this is the first time I've run into this issue.

Can someone help me out with this? I've got 11 stores that I've had to disable because of the notice and I'm taking tons of heat because of it.

thanks,
json

20 Jan 2010, 12:40 AM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: non-writable configure file being flagged as writable

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.