Warnings into Errors that shut down my site!!!

8 Jun 2006, 8:44 PM

#1

New Zenner

Join Date:: Mar 2006
Posts:: 11
Plugin Contributions:: 0

Warnings into Errors that shut down my site!!!

I've not changed nor played around with the scripts lately and this morning my site has a bright red bar with a warning that reads
"Warning: I am able to wriite to the configuration file: ..../includes/configure.php. this is a potential security risk - please set the right user permissions on this file"
"Warning session.auto_start is enabled - please disable this php feature in php.ini and restart the web server."

so i hit reload to reload the page just incase this was a hicup and then i get this messaage...

Fatal error: Unknown(): The script tried to execute a method or access a property of an incomplete object. Please ensure that the class definition navigationhistory of the object you are trying to operate on was loaded before the session was started in /home/shane/public_html/store/includes/application_top.php on line 425

what is the right permissions and how do i reset them?
how do i disable the session.auto_start feature in php.ini?

thanks!!!!

it required a pc running Windows XP or better....so i bought a Mac

8 Jun 2006, 8:57 PM

#2

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: Warnings into Errors that shut down my site!!!

If it suddenly happened overnight, your host must have upgraded/changed their system's security settings.

The FAQs talk about permissions etc. You want the configure.php files to be read-only. CHMOD 644 or 444 are typical. Sometimes you can't set down to 444 using your FTP software; in such case, use your hosting control panel's "file manager" to locate the file and change properties/permissions.

As to the session.auto_start, I found this post (and several others) by searching for "session.auto_start":
http://www.zen-cart.com/forum/showthread.php?t=37676&highlight=session.auto_start

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

8 Jun 2006, 9:01 PM

#3

shane_fixedearth

New Zenner

Join Date:: Mar 2006
Posts:: 11
Plugin Contributions:: 0

Re: Warnings into Errors that shut down my site!!!

thank you for your quick reply... i'm not familiar with the command line "chmod 444" is that what i would type? sorry, just not that familiar...

it required a pc running Windows XP or better....so i bought a Mac

8 Jun 2006, 9:02 PM

#4

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: Warnings into Errors that shut down my site!!!

chmod is a linux command to "change mode". Easier to use the hosting control panel.
You can also use your FTP software to "try" to change the settings ... usually right-clicking lets you modify file properties.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

8 Jun 2006, 9:15 PM

#5

shane_fixedearth

New Zenner

Join Date:: Mar 2006
Posts:: 11
Plugin Contributions:: 0

Re: Warnings into Errors that shut down my site!!!

I read the posting from the link you sent and now my question is for the "work around" what do i need to tell them to "work around" i'm not sure what's wrong and what needs to be done to "fix" the problem that needs the "work around"...know what i mean?

it required a pc running Windows XP or better....so i bought a Mac

8 Jun 2006, 9:34 PM

#6

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: Warnings into Errors that shut down my site!!!

http://www.zen-cart.com/forum/showthread.php?p=213920#post213920

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.