SSL Permissions with Fasthosts

[Guest]

Hello,

 

I'm using the UK hosting company Fasthosts which I've seen mentioned on here a few times before. Basically I've set up an SSL area, put all the relevant bits in the right places and it's all working fine. Only problem is I keep getting the error message saying my configuration.php files are writable and this is a security warning.

 

Apparently Fasthosts SSL servers are windows based and I can't use CHMOD via my ftp to change the permissions on it (their main server is Linux based). There's no way to browse files through their website control panel.

 

Can anyone suggest a way around this please?

 

Failing that can I just remove the error message somehow? I don't really want my customers seeing that.

 

Thanks in advance,

Sam

[Gauravs]

Failing that can I just remove the error message somehow? I don't really want my customers seeing that.

 

There would be a file manager somewhere in hosting panel to change permissions. Rather then hiding the error (which opens up your site to unwanted elements) you may open a ticket with hosting company and request them to change the file permissions.

Not sure if this would work, but you may also try to download file on your machine, change permissions, and upload it back. It works sometimes, it fails sometimes...

[Guest]

There's no file browser on their control panel.

 

Here's what I got from them:

 

Thank you for your email. Unfortunately there is currently no way to change the file permissions on windows stored on our windows servers.

 

I realise removing the error message is far from ideal but there doesn't seem to be any other way around it.

 

I tried setting the files to read only (based on reading another thread) - that had no effect. I'm not sure how I can change the permissions using the linux numbering system on this machine as it's windows based.

 

Cheers for the suggestions though!

[Gauravs]

// check if the configure.php file is writeable
 if (WARN_CONFIG_WRITEABLE == 'true') {
if ( (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) && (is_writeable(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) ) {
  $messageStack->add('header', WARNING_CONFIG_FILE_WRITEABLE, 'warning');
}
 }

 

HEADER.PHP - comment it with block quote /* code */ or // for each line.

 

This is rather interesting if host doesn't have ability to do what you have requested for... time to change the host my friend.

 

Thanks

GS

[Guest]

Thanks a lot.

 

Yeah it's certainly an eye opener - odd though as they're quite a major hosting company. Perhaps the guy just couldn't be arsed to help me? :lol:

 

I'll keep looking for a way round it for now - thanks again.