I need help with configurating permision...

[Vasily]

Hello!!

My store has been working about 1 month without any errors, but recently i've got this error on my index page : "Warning: I am able to write to the configuration file: /home/freeshop/public_html/includes/configure.php. This is a potential security risk - please set the right user permissions on this file."

 

I haven't change any permision. What might be the problem?

Thank you!!

[241]

your host may have made updates at there end for security reasons and now the permission that you did have are now allowing the warning message try setting the permission for the file to chmod 444 read only state.

[Vasily]

Thank's Steve, but nothing changed! I realy don't know what to do... :(

[241]

what do you mean when you say nothing changed, do you mean that the permissions did not change or the warning message did not change.

If permissions you need to check this with a good ftp program, if the permissions are not changing again this will be part of the hosts security measures, in that they will not be allowing users to set permissions below the 644 setting, if this is the case then you have to contact the host provider and request that they change the permission for you.

 

If it is a case that the permissions are definitely set to 444 read only state for all then with this knowledge you can disable the warning message in catalog/includes/header.php lines #20 to #25 by changing the code to this

/*
// check if the configure.php file is writeable
?if (WARN_CONFIG_WRITEABLE == 'true') {
? ?if ( (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) && (is_writeable(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) ) {
? ? ?$messageStack->add('header', WARNING_CONFIG_FILE_WRITEABLE, 'warning');
? ?}
?}
*/

 

*** WARNING only do this if you are sure that the permissions are set to 644 or 444 (preferably 444)***

[schneckster]

Vasily,

 

Are you with Dataflame, by any chance? I've had the exact same thing happen to me, today... though I haven't been able to check the permissions.

 

Schneckster