osC admin security warning question

[Ken_Shea]

OnThis security warning

" I am able to write to the configuration file: ............../includes/configure.php. This is a potential security risk - please set the right user permissions on this file. "

Permissions show 0644 which seems normal, is that not correct?

 

Thanks

[♥ecartz]

It depends on who owns the file.  Sometimes 644 will work.  Sometimes you need 444. 

If it's your server (not a host), you could chown the file instead of chmod to 444.  But if a shared host, the simplest thing is to just change it to 444 or 400 or whatever. 

[Ken_Shea]

There is no security warning with 444 so guess it's all happy now.

Thanks for the quick reply.