How do I remove "I am able to write..." message completely?

I know how to set the file permissions on the configure.php file to avoid the messages that says "I'm able to write...". However I need to edit this file sometimes, and those few times that I edit this file I have to set permissions so that I (user) can write to it. While doing this the "Red message" displays on the webshop, and any visitor visiting the website during that time will see it as well. That itself I regard as a security risk: letting your visitor know exactly when your vulnerable and also displaying the exact path to the vulnerable file. Also customers would loose trust in you as a reliable seller, when they see such messages. :lookaroun

Therefore I want to disable this message completely, because I know how set those permissions correctly. Anyone knows how I can remove it?:cool:

If you need to edit the configure.php files on an active shop, take the shop down for maintenance until you're done.

afo:

If you need to edit the configure.php files on an active shop, take the shop down for maintenance until you're done.

Nope I'd like to avoid doing that. Thank you anyways!

why would you need to edit the configure files on a live shop.

Merlinpa1969:

why would you need to edit the configure files on a live shop.

I always have a copy of the life shop database somewhere else. So if I did something wrong in the shop that messes up, I like to quickly edit the configure file to point to a database that has the "working/healthy/uncorrupted" version of the shop, this for getting the shop up again in satisfactory condition in a matter of seconds.

I know I can work on a copy of the shop located somewhere else, but I usually do the very small changes on the life webshop (so therefore I'd love to be able to just point to another healthy database very fast, in case something happens).

I know that this only help me when it comes to database issues, not things in the filesystem. But for filesystem changes I test on a completely different site.

Also for mayor changes to the database, like global attributes updates, I'd highly recommend doing on a copy site, never on the live site.

you may want to use the developers toolkit and see where the wording is defined,

then comment it out,

but be careful would suck to have a ronot find a writable file and take out your whole site

As a safety ... make the message only show to the Admin similar to how the Down for Maintenance works but allows you, the one with a valid IP setup to still run the shop ...

Now you can see the warning to remind you ... but customer's cannot ... :cool:

Ajeh:

As a safety ... make the message only show to the Admin similar to how the Down for Maintenance works but allows you, the one with a valid IP setup to still run the shop ...

Now you can see the warning to remind you ... but customer's cannot ... :cool:

Yeah thats actually a very good idea. :clap:
Is there a guide somewhere on how to set this up?

Using the handy dandy Developer's Tool Kit ...

In the bottom input box enter:
EXCLUDE_ADMIN_IP_FOR_MAINTENANCE

And do a search on the Catalog ...

This will show you numerous applications of this ...

Then, find that warning in the same manner and locate where it is displayed and work in an extra IF on that ... :cool:

Yes you have to work to do this ... it is good practice ... :smartalec:

Please follow Ajeh's instructions for security reasons
I found the "lazyman's insecure workaround": I simply removed the message in English PHP to get rid of this warning, but I highly recommend others to NOT:no: follow my example because in case you forget to secure those permissions one beautiful day, you might risk ending up in court and having to empty your pockets for millions of dollars:Flush: , just because some sensitive info about your customers "leaked out".:oops: And keep in mind that everybody forgets every once in a while!:yes:

The developers tool that comes bundled in ZenCart is just great:clap: