I have installed with the original dist-configure.php, works fine, any consequences?

14 Jun 2007, 9:51 AM

#1

Zen Follower

Join Date:: Jun 2007
Location:: Milton Keynes UK
Posts:: 153
Plugin Contributions:: 0

I have installed with the original dist-configure.php, works fine, any consequences?

I have installed zen-cart with the original files dist-configure.php I haven't made any privileges changes ( i am on a windows server) the shop works fine, I have personalized it etc... IS THERE ANY OTHER CONSEQUENCES IN SECURITY MATTERS?

Franco Cauter
[ aromaegusto.co.uk ] [ livemk.co.uk ] [ insouthitaly.co.uk ]

14 Jun 2007, 6:49 PM

#2

Kim

Obaa-san

Join Date:: Jun 2003
Location:: West Coast, North America
Posts:: 26,685
Plugin Contributions:: 0

Re: I have installed with the original dist-configure.php, works fine, any consequences?

See your /docs/ directory for security recommendations.

Please do not PM for support issues: a private solution doesn't benefit the community.

Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

9 Jul 2007, 10:55 AM

#3

g1media

New Zenner

Join Date:: Feb 2006
Posts:: 37
Plugin Contributions:: 0

Re: I have installed with the original dist-configure.php, works fine, any consequences?

but what are the risks of leaving configure.php with write permissions.

10 Jul 2007, 4:56 AM

#4

ajeh

Oba-san

Join Date:: Sep 2003
Location:: Ohio
Posts:: 62,757
Plugin Contributions:: 1

Re: I have installed with the original dist-configure.php, works fine, any consequences?

Let me go read your file and get the info and when your database is blown and I have your passwords you can then come back and let us know what you think of this ... :eek:

That would be a very very bad thing to allow to happen ...

Set it to 644 or 444 and you may need to do this via your Control Panel if your host does not give you proper control over your own site to manage this yourself in your FTP ...

And, in some worse case scenarios ... you may need to change the permissions by contacting your host each and every time you want to touch the file ... (hint get a new host in this case) ... :cool:

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

12 Jul 2007, 10:33 AM

#5

g1media

New Zenner

Join Date:: Feb 2006
Posts:: 37
Plugin Contributions:: 0

Re: I have installed with the original dist-configure.php, works fine, any consequences?

I've stuck a test zen cart on windows, configure.php hasn't been secured.

I've tried to browse that file via IE and did a view source but nothing is showing.

Where's the risk?