Views: 2,065
New Zenner
If the web hosting company stated that "File permissions higher than 775 will not work", can the Zen Cart be installed on the server and run correctly such as upload somethings or upgrade, etc.?
Sensei
You can set permissions to 755 and Zen Cart will work fine.... with a few limitations.
The things that will not work are:
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
New Zenner
Thanks DrByte. I want to clarify that
Chmod 755 has the same limitation of Zen Cart as what I asked for chmod 775 ? Or less limitation for chmod 775?
for doing without limitation you need to change permission of files (the same as all stated in FAQ for installation to 777) to 777 every time I require to eg. upload image?
after that, do I need to change them all to lower permission such as 644 for security?
"- admin banner statistics graphs won't be saved" means the files related to this cannot be set permission below 777 if I require this to work? Any security concern?
"file-based session/query caching (have to use the default of "database" instead)" means what? Need to setup or it will do automatically?
Maybe too many questions.....:lookaroun ...please help, thank you.
Sensei
755, 775, 715, as long as the last digit is not a 7, you have the limitations.
yes. ... or use FTP to upload your image and then manually set the image name after the fact by re-editing the product.
yes, that's a good idea
if you don't care about storing the graphs which show banner-display stats, you don't need to worry about this. As to security, any file/folder set to 777 is at risk of exposure to hackers if you're on a shared-hosting setup.
During setup, you have the option of choosing a caching type. It defaults to "db" for sessions, and "none" for sql queries. Keeping the defaults is always recommended, and is most secure.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
New Zenner
Thank you very much for your detail explanation. :laugh:
Tell staff why this post should be reviewed.
