49 replies to this topic

[windprod_doc]

i have had this same problem -- still do.
changed permissions on both stated files to 444.... even installed steves protection of configuration contribution.
it tells me the settings have been changed, but they come up unprotected again.

so.... will commenting be my only option here?

[Vger]

To explain things a little about setting permissions.

The CHMOD command used via FTP is only of use on Apache servers with a Unix/Linux operating system. CHMOD is an Apache command and does not work on Windows. If you're on a Windows server then you can CHMOD the files as much as you like via FTP and the settings wil appear to change whilst in reality they remain the same.

If you have not already done so you should try using the File Manager in your web hosting control panel to reset permissions.

You can also try this method:

Create a new text file on your desktop and rename it to chmod.php (ignore the warning about changing the file type). Then put the code below into it, and upload to the root of your osCommerce website. Once you've done that go to the root of your website in your browser and add 'chmod.php' onto the address e.g. http://www.yourdomain.com/chmod.php You won't see anything on the screen but the permissions should have been changed.

<?php
chmod ("includes/configure.php", 0444);
?>

If that doesn't do it then get onto your hosting company. Don't leave the chmod.php file on the server.

Vger

[heineken]

Vger, on Jan 13 2006, 01:58 PM, said:

To explain things a little about setting permissions.

The CHMOD command used via FTP is only of use on Apache servers with a Unix/Linux operating system. CHMOD is an Apache command and does not work on Windows. If you're on a Windows server then you can CHMOD the files as much as you like via FTP and the settings wil appear to change whilst in reality they remain the same.

If you have not already done so you should try using the File Manager in your web hosting control panel to reset permissions.

You can also try this method:

Create a new text file on your desktop and rename it to chmod.php (ignore the warning about changing the file type). Then put the code below into it, and upload to the root of your osCommerce website. Once you've done that go to the root of your website in your browser and add 'chmod.php' onto the address e.g. http://www.yourdomain.com/chmod.php You won't see anything on the screen but the permissions should have been changed.

<?php
chmod ("includes/configure.php", 0444);
?>

If that doesn't do it then get onto your hosting company. Don't leave the chmod.php file on the server.

Vger

Hi.

I got this error and tried the different settings with CHMOD in WS FTP but still got the error.
Then i tried to make this file as discribed here. And this solved the error ! Thanks

[webination]

Has any one found a solution to this issue yet. I have simply commented it out but I still don't understand what is going wrong with the check. Permissions are set correctly. i even installed a tool to do this but it doesn't seem to work either keeps coming back as unprotected.

[hpn]

stevel, on May 31 2004, 07:07 PM, said:

I added a contribution to manage this. http://www.oscommerce.com/community/contributions,2137

I love you Steve L. (litterary speaking)
Im on a Apache - Linux server and added your contribution (the last updat). Worked perfectly! Been trying to solve this problem for over one week so Im releved - think Im going out for a beer to salubrate.
/h

[D_W]

I have had this problem too and have solved it from the advice given above, thanks v much.

Probably a daft question however just so I understand what is going on, why do the two configuration.php files need to be protected, as only I have the passwords to ftp the server, and the admin part of the website is also password protected. I guess my question is what danger I am protecting myself against?

DW

[gkygrl]

I was having this same problem with multiple instances. The 444 finally offers an easy solution.

Thanks

[drmad]

Vger, on Jan 13 2006, 01:58 PM, said:

To explain things a little about setting permissions.

The CHMOD command used via FTP is only of use on Apache servers with a Unix/Linux operating system. CHMOD is an Apache command and does not work on Windows. If you're on a Windows server then you can CHMOD the files as much as you like via FTP and the settings wil appear to change whilst in reality they remain the same.

If you have not already done so you should try using the File Manager in your web hosting control panel to reset permissions.

You can also try this method:

Create a new text file on your desktop and rename it to chmod.php (ignore the warning about changing the file type). Then put the code below into it, and upload to the root of your osCommerce website. Once you've done that go to the root of your website in your browser and add 'chmod.php' onto the address e.g. http://www.yourdomain.com/chmod.php You won't see anything on the screen but the permissions should have been changed.

<?php
chmod ("includes/configure.php", 0444);
?>

If that doesn't do it then get onto your hosting company. Don't leave the chmod.php file on the server.

Vger

Great TIP.

Worked just fine. I did realise that the CHMOD option through FTP was not changing to 444 (from 644) but I had no idea what was wrong.

[FusionControlCentre]

Thankyou so much for this!

I made a simple change to my config file, uploaded it, and voila! A nice security banner I had never seen before! arrrg. A quick google and here I am. Downloaded that controbution, easy to install and worked great! No more security banner! I tried changing it manually via an FTP client, and it said "CMHOD changes successful" but no dice. This worked awesome. Big pat on the back for you guys.

[e-master]

Just want to share what worked for me!
I've tried everything on this forum, changing de chmod with my ftp soft, and by the way my server is apache linux, and didn't work I've notice that when i change the permissions with the ftp soft it didn't really change, so I did my last try and it works!
I change the permissions using the cpanel>File Manager and bang!! there's no warning sign anywhere in my page!
Hope this will help someone!
God Bless!

[cruz.dre]

Just a quick note to Vger, you are a legend!! thanks so much for the lil' chmoding code!

Thanks again :)

[wandringa]

stevel, on May 31 2004, 12:07 PM, said:

I added a contribution to manage this. http://www.oscommerce.com/community/contributions,2137

I am having this Warning Message issue on one of my sites. This is my second site with the same host provider and I did not have this issue with the first one. My current provider has not been the best to work with on things like this so I installed this contribution. It installed fine and even seems to operate fine, it gives me the Successful message after hitting Update, but the warning message is still there and utility contribution just flips back to Unsecured for both the configure.php and the admin.

So I have 2 different questions:

1. I am not a really web site guru, and I have not been able to find the answer or understand the answer from this thread. Does anyone have a suggestion for me? I see a lot about doing a CMHOD on the file to change the premissions and I am not sure how to do this with the host service we use, XO Communication.

2. Can anyone recommend a Hosting service that is well priced, supports osCommerce enough to be helpful and offers a good user interface to manage the admin of the host services? This is what I have liked about XO to this point but the lack of support has killed my loyalty.

[DogBert]

Solution: Change the permissions right on the server, not via an ftp client. Use the file manager your site's control panel to change the permissions if you don't have command line access.


This was a bit maddening - I've used OSC a few times and only recently had this problem on a new store. According to my FTP client the permissions were set right, and i was still getting the error. When I went into the control panel I found the config files still had 644 despite what my ftp client was telling me. I set both to 444 on the server and that worked. Thanks to those above that suggested doing it via the control panel - i was starting to think i was losing my mind seeing the error there yet the permissions right in ftp.

Edited by DogBert, 25 December 2007, 07:07.

[mattih5]

TB, on Apr 5 2003, 11:50 PM, said:

If you're using Windows as your test server and you get this error... just do the following:

Right click on 'includes/configure.php'

Select 'Properties' (A new box will appear...)

Select/Tick 'Read-only'

Click 'Ok'

(Don't forget to do this for both your 'catalog' and 'admin' directories.
Viola!
All better...
Cheers,
Tony

Cheers, been trying to figure this out for ages. Why does selecting it to "read-only" work, surely if OS Commerce needs to write to it, the file should have this unticked?

[Coopco]

mattih5, on Jan 31 2008, 09:29 PM, said:

Cheers, been trying to figure this out for ages. Why does selecting it to "read-only" work, surely if OS Commerce needs to write to it, the file should have this unticked?

That why is it not ticked for installation.

[perthmetro]

i set mine to 444 using my cpanel file manager... my ftp client couldn't change it

[tikitone]

Hi-
I get the same error message on top when the config.php file is set to 644. So I try and changing it to 444 but it always reverts back to 644. Same with any other ftp program. Any thoughts? thanks in advanced

[tikitone]

tikitone, on Apr 22 2008, 03:03 PM, said:

Hi-
I get the same error message on top when the config.php file is set to 644. So I try and changing it to 444 but it always reverts back to 644. Same with any other ftp program. Any thoughts? thanks in advanced

I answered my own question. Go to the servers Cpanel and change the permission there to 444

[mydzine]

sorry i'm a little new to this
can someone explain in step by step instructions how to change the permission settings via the admin login.

[salt]

quick fix for window users: http://www.oscommerce.com/community/contributions,3131