PDA

View Full Version : Able to write to config file - after a few months I get this



ozstar
10-15-2005, 11:40 PM
Hi,

After a few months of great performance without a hitch.. I get this pink message at the top of my Home Page. Everything seems to work fine however this message is scary.

I have my instructs at 755 and config at 644.

Warning: I am able to write to the configuration file: /home/mydom/public_html/catalog/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

Yes, I have done a 'search' of this site but no help comes up.

My Host techie has told us to add a robots.txt file and make some changes to contacts.php file for security sake, but I have not done so as yet. Maybe this is the cause?

Thanks..

Ozstar. :?

jpf
10-16-2005, 12:01 AM
You have to write protect BOTH of your configure.php files. CHMOD the file to '644' or ask your host to write protect it for you.

Good Luck

ozstar
10-16-2005, 12:34 AM
Thanks.

I have checked the permissions for catalog and admin configure.php files in includes, but altho they are both 644, somehow the message stays.

It's got me beat! Any other ideas?

Thanks again

Ozstar

michael_s
10-16-2005, 10:27 AM
chmod 444

Your host probably updated the server and installed phpsuexec which requires tighter security.