Permissions question post-install

[sw_techie75]

I just installed osCommerce 2.3 and am looking under the "Security Directory Permission" option in Admin pages there is a long list of files where it says "writable" and a green icon and then Recommende and a red cross.

I have tried to change the permissions on these files/folders using FileZilla, so they're not writable but it doesn't seem to work. The permissions are 0755 on all of them.

 

Questions are:

1. What does this really mean, can I continue to work with the webshop with these settings or do I need to change the permissions for it to be a safe install and have all icons be green?

 

2. What is the correct permission number to set them to so they're ok? I have the 3 options Read, Write and Execute on Owner permissions, Group permissions and Public permissions to choose from.

 

2a. Is there a known issue with changing permissions on FileZilla?

 

Thank you, hope someone can help me.

[♥geoffreywalton]

1. Yes, that is why they developed it.

 

2. As per the red and green .....

 

2a. It is not filezilla but the server setup which is preventing permission changes.

 

Try using the filemanager in your hosting control panel.

 

If that doesn't work ask your hosting help desk.

 

Cheers

 

G1

[MrPhil]

Many servers are configured to silently ignore chmod (permission change) requests from browsers. You may have to either use permission changes from within a program (does osC provide this?), or use your host's control panel > File Manager to change permissions.

 

Directories ("folders") should always start out as 755 (unless your host requires or recommends something stricter -- sometimes they do this for public_html/ or other selected directories). Only if your application (osC) complains that it is unable to write to a particular directory should you liberalize permissions (try 775, and as a last resort, 777). If you must use 777, try to change back to 755 when you're done uploading products or installing add-ons, or whatever operation you were doing. You should try to avoid giving random other people (sharing your server, or even out on the Web) write access to your site!

 

Files should always start out at 644 (unless your host requires or recommends something stricter). Only if your application (osC) complains that it is unable to write to a particular file should you liberalize permissions (try 664, and as a last resort, 666). If you must use 666, try to change back to 644 when you're done uploading products or installing add-ons, or whatever operation you were doing. Note that the two "configure.php" files need to be "read-only", which is normally 444 permissions (although 644 may work in certain server setups).

[sw_techie75]

Well. FileZilla won't let me change permissions and there are no option on my hosts control panel to change them. I even tried to write a php script to change the permissions to read only for all the directories in the list (red crossed ones), but it won't change them.

I have talked to the support at my domain provider and they can't tell why I can't change permissions on these directories osC is installed on. They say I have full rights to change permissions.

Am I correct that the directories need to have permission 0555 to be read only (red cross) in the recommended column.

[MrPhil]

Possibly you don't "own" the files or directories in question? Get a full listing of the files on your site (i.e., run ls -laR from your highest directory, assuming this is a Linux server). See if you're not listed as the owner of your osC files.

 

You certainly can make directories Read-Only with 555, but that seems to be going kind of overboard. Whenever you need to upload something or update something, you'll have to change back to 755.