Warning: I am able to write to the configuration file:

**Tanzy** · 22nd January 2006, 07:56 PM

I have just installed a test installation of osCommerce since one of my clients is looking for a shopping cart application and it seems that a number of people are using this. Hence, the test install so that I can get to know it before advising my client. However, I'm getting the following error at the top of the page

Warning: I am able to write to the configuration file: D:\domainname\wwwroot\location/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

Can anyone advise me since I have no idea about this application or PHP (I'm a .Net ASP developer). I do not need to know about PHP or that, just some info and help with this app.

Cheers

Tanzy

**RFH Customer: Jon Freeman** · 22nd January 2006, 08:18 PM

Try setting the file in question to read only.

**Tanzy** · 22nd January 2006, 08:31 PM

So far as I am aware it is not possible to make the file readonly via Helm. I suppose that if I inplemented this for a client I caould always raise a support call for it to be done.

**RFH Customer: Jon Freeman** · 22nd January 2006, 08:33 PM

Originally Posted by Tanzy

So far as I am aware it is not possible to make the file readonly via Helm. I suppose that if I inplemented this for a client I caould always raise a support call for it to be done.

Can't you do it via ftp?

**Tanzy** · 22nd January 2006, 08:35 PM

not via CuteFTP. Since it is Windows servers CHOMD will not work.

It is possible to set the whole site to not be able to be wrote to, but that will not enable certain other method to work.

**RFH Customer: Jon Freeman** · 22nd January 2006, 08:42 PM

Originally Posted by Tanzy

not via CuteFTP. Since it is Windows servers CHOMD will not work.

It is possible to set the whole site to not be able to be wrote to, but that will not enable certain other method to work.

I have just tried KBear (on Linux) on one of my RHF sites. It accepts the CHMOD command and appears to change permissions. Let's put it this way, I viewed the properties of a file that showed owner, group and user write permissions, removed them and it said CHMOD had been successful. I closed and repoened KBear and viewd the properties again and the flie was still showing no write permissions so I guess something must have stuck.

**Tanzy** · 22nd January 2006, 08:58 PM

Nice one

I have just ried CuteFTP and set Owner, Group, Public to be read only.........

It worked, thanks.

**Staff: Warren Ashcroft** · 22nd January 2006, 09:58 PM

Originally Posted by Tanzy

Nice one

I have just ried CuteFTP and set Owner, Group, Public to be read only.........

It worked, thanks.

Cant have, there is no such thing as CHMOD on a Windows FTP server - the FTP server would simply reply with "OK" to that command, and do nothing.

As for the error, you can safely ignore it (there is a place to turn it off IIRC) - as the error only applies to a Linux setup.

**Tanzy** · 22nd January 2006, 10:46 PM

Thats what I thought Warren. You could check the file, it is located at the place I raise the ticket about.

However, I did this and the error disapeared ??? me confused

**RFH Customer: Jon Freeman** · 22nd January 2006, 11:40 PM

Originally Posted by Tanzy

Thats what I thought Warren. You could check the file, it is located at the place I raise the ticket about.

However, I did this and the error disapeared ??? me confused

I'm not claiming to understand it but just tried it using a Windows client, ftp Surfer by using its "change permissions" on another file of mine located at RFH. Before, if I click properties I see

-rw-rw-rw

and afterwards

-r-r-r

The command it appears to issue is: SITE chmod 444.

I have also tried editing a file I changed with KBear using Kate. When it looks to be set at read only, I can't save my changes but I can when everything is read/write.