Warningafter Installation Of Zen-cart

Hi,

I'm not able to correct permission for the two files configure.php after installation. I've tried both in explorer ftp and in file manager in my webhotel. In filemanager there is no option for correcting this. In explorer ftp it is, there are 9 check> boxes, read, write and start for owner, group and all
users. The problem is, that after installation these two files have checkmarks in read for all but also write for only owner. When I correct this and say OK and close the file it seems ok. If I then cl> ose the ftp explorer, and then open it again, the changes I made has dissapeared and it it still checked for
write for owner. When I open my zen-cart store I get the warning:

Warning: I am able to write to the configuration file:
/customers/kjolebutikken.com/kjolebutikken.com/httpd.www/nettbutikk/includes/configure.php.
This is a potential security risk - please set the right user permissions on
this file.

How can I fix this when it doesn't work as described above?
Very happy if you can help me. I've just started and I would like to fix this before I do anything else, in case I have to install all over again (have done it three times already)

Thanks
Best regards
Kjolebutikken

See if you can change permissions to 444 if 644 is not working ...

If you cannot do this in FTP try via your Control Panel for your site as some servers do not allow this via FTP ...

Hi again, thank you for answer. I don't see any numbers like these at all (like 444 and 644) so I don't know what they mean or where to find them yo correct them. I only get the checkboxes, but they fall back to "before settings" all the time after I change them. Please explain me about 444 and 644 so maybe I can try yhis way.
Thank you so much,
Kjolebutikken:-)

This FAQ talks in a bit more detail on how to make the changes:
https://www.zen-cart.com/tutorials/index.php?article=9
https://www.zen-cart.com/tutorials/index.php?article=148

444 means "read only for owner, group, and world/public"
666 means "read/write" for owner, group,world"
777 means "read/write/execute for owner, group,world"

the first digit is owner
2nd digit is group
3rd digit is world/public

You're PRIMARILY concerned about "world/public".

So, technically, 744 would do. But practically it's usually 644 for read-only.

If you don't have numeric options available, just make sure it's not "writable" based on whatever word-descriptions you have.

Hi,

I am getting a similar problem.

Cannot change the file permissions on the configure.php either. Have used lots of different programs to try and do it, tried using different levels all to no result.

same error each time - bad file descriptor.

I can change each of the other file permissions on the server but not these two.

Any ideas?

kwraight:

same error each time - bad file descriptor.

I can change each of the other file permissions on the server but not these two.
Sounds like ownership of the files has been given to the webserver, not to your own userID.

"Bad file descriptor" sounds like you likely don't have rights to make the desired changes.... which points to my security comment above.

I suggest talking to your web-host for some assistance.

Ajeh:

See if you can change permissions to 444 if 644 is not working ...

If you cannot do this in FTP try via your Control Panel for your site as some servers do not allow this via FTP ...
Hi team,

I have the same issue when I start my zen-cart store and I get:

Warning: I am able to write to the configuration file:
/customers/kjolebutikken.com/kjolebutikken.com/httpd.www/nettbutikk/includes/configure.php.
This is a potential security risk - please set the right user permissions on this file.

But I have checked the permissions which is already 644. I cannot change to 444 though.

What is the problem? Thanks in advance for any suggestions.

If you're convinced that the file is read-only and you're willing to take the risk of it "not" being read-only and turn off the warning, you can do this:

1. Create a new file:
   /includes/extra_datafiles/warnings_off.php

2. Put the following content in the file:```

3. Upload to your site.


NOTE: You are still running the risk that the file may be writable, and thus could be hacked if the server's security configuration is weak.

DrByte:

If you're convinced that the file is read-only and you're willing to take the risk of it "not" being read-only and turn off the warning, you can do this:
.....
Dear DrByte,

I have checked many times and the permission is 644. Thanks for your advise on turning off the warning anyhow. I am just a bit worry but I might do that anyhow.

Brgds.

You could always ask your webhost for advice on how to make the files read-only.

DrByte:

You could always ask your webhost for advice on how to make the files read-only.
Dear DrByte,
Appreciate for all your advises. I'll check with my webhost tomorrow. On the other hand, that didn't explain why zen-cart still complain on the configure.php file even though its permission is already 644 which should be ok stated in all the documents. Maybe something else as well.
Kind regards.

On some servers, 644 is not enough and you need 444 or the message will continue to show ...

Unfortunately, on some servers you may not be able to set 644 or 444 via FTP and will have to do it through your Control Panel ...

On others, you may not even be able to set 444 even through the Control Panel ...

You will have to work it out with your hosting site to allow you access to all the settings in your own site ...

If they will not provide you with full access to your server, might I suggest that you peek at our Certified Hosting sites and find a fast, reliable hosting company that will work your way and not their's? :)

Dear Ajeh,

Thanks for your advise (including DrByte). I had called up my hosting provider today and fixed up my right to change the permission level. Now, I don't have the warning.

But I have to say I am very surprise on how responsive this forum is. Good on all of you.

Kindest regards.

We do try to stay on top of things here on the forum ...

While it is supported by volunteers and the members of the Zen Cart Team, we like to be involved in the forum as much as possible to help assure that we see and hear about issues, the needs and desires of the community first hand ...

While new things that you need may not always get in the next release or two ... we do try to work in new features that help make your e-commerce experience a better one that grows with each release ... B)

Like the aforementioned users, I am getting the same error message. I use Coffee Cup as my FTP. I click to change the permission to the specified 644 through check marks or what not and then it reverts back to the prior 700. How do I ensure it stays at 644?

You may need to change the setting via your Control Panel ...

Some servers do not allow 644 or 444 to be set via FTP