Security Tip for you with Configure.php

[DejaVu]

For some reason, my server would'nt let me make the configure.php read only (644 or 444)

 

So I did this instead -

Copy your configure.php below your root, usually under the htdocs or www folder (back it up also!) and edit the includes/configure.php

Replace the lot with this code

<?php include("../configure.php"); ?>

 

You will need to comment out the following towards the end of your 'includes/application_top.php'

// set which precautions should be checked
 define('WARN_INSTALL_EXISTENCE', 'true');
//  define('WARN_CONFIG_WRITEABLE', 'true');
 define('WARN_SESSION_DIRECTORY_NOT_WRITEABLE', 'true');
 define('WARN_SESSION_AUTO_START', 'true');
 define('WARN_DOWNLOAD_DIRECTORY_NOT_READABLE', 'true');

If this is left and you cannot change to read only as I couldnt, the warning in red will be displayed at the top of every page.

Of course, though, your configure.php file is safe under the root of your site. :)

[Jack_mcs]

Oh my, don't do that. The root is less secure than the includes directory. The fix for a problem like yours is to change hosts, not lessen the security of the shop to fit their setup.

 

Jack

[akvario]

Copy your configure.php below your root

 

Sounds pretty secure because the file isn't possible to access with a browser.