Jump to content


This topic is now archived and is closed to further replies.


configure.php settings

Recommended Posts

Hi, When I access my shopping cart I get a warning on top that I need to change the settings for the includes/configure.php file. The settings are currently at 444. I tried other settings, e.g. 644 but the message does not disappear. What am I doing wrong here?





Share this post

Link to post
Share on other sites

Need help installing add ons/contributions, cleaning a hacked site or a bespoke development, check my profile


Virus Threat Scanner

My Contributions

Basic install answers.

Click here for Contributions / Add Ons.

UK your site.

Site Move.

Basic design info.


For links mentioned in old answers that are no longer here follow this link Useful Threads.


If this post was useful, click the Like This button over there ======>>>>>.

Share this post

Link to post
Share on other sites

Either use the file manager supplied by your webhosts control panel or you can try using an FTP client, to change the permissions of those files to a lower setting, probably 444 to be sure the server sees those files as read only.


If those will not allow you to change file permissions down to a read only setting, then try this.


1. Create a file, call it whatever you want...i.e. fileperm.php and make the following code additions to it before uploading it to your working site.


2. Add the following code changing the URL in the code to that of your sites URL.


   if ( ( !chmod( "includes/configure.php", 0444 ) ) ||
        ( !chmod( "admin/includes/configure.php", 0444 ) ) ) {
header( "Location: http://yourwebsite.com" );


3. Upload the file to the main catalog of your site.

4. Using a web browser, navigate to the file and by doing so the file permissions will change and the error message will disappear.

5. Delete the fileperm.php file.

- Stop Oscommerce hacks dead in their tracks with osC_Sec (see discussion here)
- Another discussion about infected files ::here::
- A discussion on file permissions ::here::
- Site hacked? Should you upgrade or not, some thoughts ::here::
- Fix the admin login bypass exploit here
- Pareto Security: New security addon I am developing, a remake of osC_Sec in PHP 5 with a number of fixes
- BTC:1LHiMXedmtyq4wcYLedk9i9gkk8A8Hk7qX

Share this post

Link to post
Share on other sites