Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

All was going well then...a security risk


Guest

Recommended Posts

Hi

I have had the shop up and running for some time and all was going great til today when i logged on and it gave me this error at the top of the page

 

Warning: I am able to write to the configuration file: /domains/b/e/bensontrading.com/public_html/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

 

I checked the file and it had permissions set to 755 so i changed it to 644 but it didnt make any difference. What is this file supposed to be set at.

 

Any help appreciated

 

John

 

www.bensontrading.com

Link to comment
Share on other sites

Hi

I have had the shop up and running for some time and all was going great til today when i logged on and it gave me this error at the top of the page

 

Warning: I am able to write to the configuration file: /domains/b/e/bensontrading.com/public_html/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

 

I checked the file and it had permissions set to 755 so i changed it to 644 but it didnt make any difference. What is this file supposed to be set at.

 

Any help appreciated

 

John

 

www.bensontrading.com

 

It should be set to 644, are you sure that your permissions did get set to that, and aren't still at 644?

 

Aodhan

Link to comment
Share on other sites

I had it set to 644 but it didnt seem to make any difference so i changed it to 444 (no write by anyone ) and it stopped that line appearing. As for "owner" of the file, im sorry i dont follow. How would i check or change that

 

Regards

 

Jester

Link to comment
Share on other sites

Well, if your system is any kind of UNIX flavour, when you do a:

ls -l

you should see a directory listing with the permissions and the owner and group settings fot the files in that directory. You should have used this command numerous times when you were changing permissions on your files... unless you were changing permissions using some kind of GUI FTP client software.

 

Anyway, use some kind of UNIX terminal app to access your directory, and do a:

chown yourname:groupname configure.php

This will change the owner of configure.php to "yourname" and the group to "groupname".

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...