Jump to content


Corporate Sponsors


Latest News: (loading..)

zwayne

Member Since 05 Apr 2005
Offline Last Active Mar 22 2012, 17:18
-----

Topics I've Started

Bizarre configure.php security warning

06 September 2011, 17:14

Today I go to our oscommerce 2.x store and see the warning:

Warning: I am able to write to the configuration file: /home/detail7/public_html/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

I immediately check the permissions and configure.php is 644, which should be fine. I change it to 444 and the warning goes away. Back to 644 and the warning reappears.

This is a store that has been up for at least three years. 644 has been used from the outset and the warning has never been seen until today. Weird.'

Any ideas?

(BTW, I have site monitor installed and no file changes have been detected.)