Forums / General Questions / What file checks to see if it can write to the config file?

What file checks to see if it can write to the config file?

Locked

Started by websmoken on 26 Dec 2006, 8:15 PM · Views: 2,156

Results 1 to 4 of 4
This thread is locked. New replies are disabled.
26 Dec 2006, 8:15 PM
#1
websmoken avatar

websmoken

New Zenner

Join Date:
Apr 2006
Posts:
2
Plugin Contributions:
0

What file checks to see if it can write to the config file?

Hi

I've been away too long. I love the look of this forum now. Ya'll done good.

Im working on WAMP5 local host and get the message:

"I am able to write to the configuration file: C:/wamp/www/zen-cart/includes/configure.php. This is a potential security risk - please set the right user permissions on this file (read-only, CHMOD 644 or 444 are typical). You may need to use your webhost control panel/file-manager to change the permissions effectively. Contact your webhost for assistance."

Can I edit a file that will eliminate this untill I upload to my server?

websmoken

26 Dec 2006, 8:59 PM
#2
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: What file checks to see if it can write to the config file?

If 644 does not work use 444 ... you may need to set that with your web site control panel as some sites will not allow 444 via FTP ...

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

26 Dec 2006, 9:32 PM
#3
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: What file checks to see if it can write to the config file?

DO NOT UPLOAD THIS FILE TO YOUR LIVE SERVER

For your TESTING area ... create a new file:
/includes/extra_configures/do_not_upload_to_live_server.php

put just the following in the file:

<?php
define('WARN_CONFIG_WRITEABLE', 'false');
?>

That will suppress the warnings.

BUT DO NOT UPLOAD THAT FILE TO YOUR LIVE SERVER

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

26 Dec 2006, 9:58 PM
#4
websmoken avatar

websmoken

New Zenner

Join Date:
Apr 2006
Posts:
2
Plugin Contributions:
0

Re: What file checks to see if it can write to the config file?

Dr. Byte

Thanks that worked you da Man!
This is for development, I know to make config not writeable. Ill delete the file upon uploading.

Thanks to you too Linda, Haven't checked to see if I can change file permissions on localhost. Haven't had to do that before.

Thanks to ya both for such a quick response.

websmoken