All was going well then...a security risk

[Guest]

Hi

I have had the shop up and running for some time and all was going great til today when i logged on and it gave me this error at the top of the page

 

Warning: I am able to write to the configuration file: /domains/b/e/bensontrading.com/public_html/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

 

I checked the file and it had permissions set to 755 so i changed it to 644 but it didnt make any difference. What is this file supposed to be set at.

 

Any help appreciated

 

John

 

www.bensontrading.com

[Aodhan]

Hi

I have had the shop up and running for some time and all was going great til today when i logged on and it gave me this error at the top of the page

 

Warning: I am able to write to the configuration file: /domains/b/e/bensontrading.com/public_html/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

 

I checked the file and it had permissions set to 755 so i changed it to 644 but it didnt make any difference. What is this file supposed to be set at.

 

Any help appreciated

 

John

 

www.bensontrading.com

 

It should be set to 644, are you sure that your permissions did get set to that, and aren't still at 644?

 

Aodhan

[celiawessen]

Make sure the owner of the file is not "notbody" "www" or "apache". These are the system's username for your webserver daemon to run as.

[Guest]

I had it set to 644 but it didnt seem to make any difference so i changed it to 444 (no write by anyone ) and it stopped that line appearing. As for "owner" of the file, im sorry i dont follow. How would i check or change that

 

Regards

 

Jester

[celiawessen]

Well, if your system is any kind of UNIX flavour, when you do a:

ls -l

you should see a directory listing with the permissions and the owner and group settings fot the files in that directory. You should have used this command numerous times when you were changing permissions on your files... unless you were changing permissions using some kind of GUI FTP client software.

 

Anyway, use some kind of UNIX terminal app to access your directory, and do a:

chown yourname:groupname configure.php

This will change the owner of configure.php to "yourname" and the group to "groupname".