Warning: I am able to write to the configuration file

**talon** · 12-30-2002, 05:54 PM

Code:

Warning&#58; I am able to write to the configuration file&#58; /services/webpages/j/a/jarononline.com/public/store/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

I chmoded both configure.php files to 644 and the include directories to 755. So why am I getting this error? I read it might have something to do with file ownership? Could someone give me details on how to fix this. I have never used the chown command before and have only chmoded using WS_ftp.

**modom** · 12-30-2002, 07:50 PM

I posted the solution for you on the osc forum.

wsftp will not work trying to chmod.

You can download cuteftp which will set the permissions correctly or, if you have a server admin area like cpanel, you can set file permissions in file manager.

**talon** · 12-30-2002, 08:27 PM

Cuteftp didn't make any difference. same error.

**michael_s** · 12-30-2002, 08:35 PM

how about chmodding from the shell... Login using an ssh client, navigate to the correct directory, and at the command prompt type : chmod 644 configure.php

If that doesn't work, contact your host and have them do it for you. This sounds like a server issue to me.

**talon** · 12-30-2002, 08:40 PM

I don't think its a servers issue, because after browsing the forums, I found allot of people having the same error.

That's the second time I have heard the word ssh. For all us noobs reading this forum, what is a ssh client and where do I get one?

**michael_s** · 12-30-2002, 08:49 PM

ssh = secure shell

Do a search on google for SSH or SecureCRT and you will find a bunch of clients. I use SecureCRT by vandyke software. It is trialware.

This is a direct command line connection to your server. Once logged in, you can issue text commands that directly effect the server. This is the most direct way to chmod. If it doesn't work, it is most definitely a server issue and you should talk to your host and find out the correct procedure for your server to set permissions.

The reason I say it is a server issue is because in over a year of installing oscommerce on various (linux,solaris,win98,winxp) different servers, and doing well over 150 installs, I have never come across this problem. I do about 10 installs a week for clients and never have a chmod problem.

Try ssh and see if that gets it for you.

**talon** · 12-30-2002, 09:07 PM

Well I didn't think I was a total moron, but now I'm starting to wonder. I cant connect to the server using SecureCRT. Probably because i have no idea whatsoever what im doing. I just plugged in the same info i used to ftp, but it wont connect.
I assume SSH is something completely different and I need more info.
I do take instructions well if you assume I have absolutely no experience with SSH.
I can ftp all day and chmoding from ftp clients has always worked until now.

**talon** · 12-30-2002, 09:10 PM

Here's the URL.
http://jarononline.com/store/catalog/default.php

**michael_s** · 12-30-2002, 09:16 PM

Your login info should be the same as your main account login, unless your host does something different.

Check to see if your host even allows shell access on your account, as many hosts do not. Then check to see if they support ssh or telnet.

Also, is your server linux based?