Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Locking down configure.php on Apache & Win2003 Srv


Tuan Le

Recommended Posts

Hi guys,

 

Can you please let me know what is the proper way of locking down the "configure.php" files when running OSC on Apache 2 and Windows 2003? Is it via NTFS or .htaccess???

 

Thanks

-Tuan

Link to comment
Share on other sites

I got one copy of OSC 2.2 MS2 configured on IIS6 on Windows 2003 already. Everything is working great, except for the Authorize.net module. It just doesn't work. I spent the last 4 weeks working with many different people but still no luck.

 

Some one suggested to try out the file on Apache and Win2003 so I am testing it out. Authorize.net module still doesn't work. But that is a separate issue from this post. For more details on this. See http://www.oscommerce.com/forums/index.php?showtopic=74412

 

The issue here is with locking down the "configure.php files. I set the Apache service to run under a user account. And then I specifically denied "write" access on this user account to the "configure.php" files but it keeps on giving me the error Warning: I am able to write to the configuration file: C:/application/webstore/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file. error message. ARRRGGGG!!!!

 

As for the htaccess, I haven't tried it yet because I am still new to Apache.

 

-Tuan

Link to comment
Share on other sites

Go to C:/application/webstore/catalog/includes/configure.php, right click, select properties, check read only, click apply.

Should work.

You rock. That did the trick. :)

 

Now only, I can get the authorize.net to work on Windows 2003. :(

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...