warning message at host

[reffael]

two questions for u, i'll be happy for some help, because right now i'm confused :)

 

1. i uploaded my store to the hosting service (linux/apache) and i'm getting this message in the pages

 

Warning: I am able to write to the configuration file: /home/site/public_html/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

 

i checked the persmission of this file and it's - 644

so what is the problem?

 

 

2. how do i control the warning messages (turn off/on) ?

 

thanks...

[reffael]

and another one :

3. which php file generates those error messages - where should i begin the search?

[241]

Try chmod 444 for the includes/configure.php file

[reffael]

hi steve, i tried to chmod 444 via ftp client and cpanel but each time it returns to 644, do u have any idea why?

[reffael]

i found the source to the warning - in header.php

but i still don't understand why does it recognize the configure.php as writeable with 644 permission?

 

// check if the configure.php file is writeable

if (WARN_CONFIG_WRITEABLE == 'true') {

if ( (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) && (is_writeable(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) ) {

$messageStack->add('header', WARNING_CONFIG_FILE_WRITEABLE, 'warning');

}

}

[241]

It is reporting the file as writeable due to the configuration of your hosts server, every host sets up there server in there own way.