Warning: I am able to write to the configuration file: ...

VoltageKing.com · **Joined:** Mon Jan 17, 2011 3:55 pm **Posts:** 4

When I go into the admin panel at http://www.voltageking.com/admin I get the following warning message below:

Warning Warning: I am able to write to the configuration file: /var/chroot/home/content/v/o/l/voltageking/html/admin/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

Warning Warning: I am able to write to the configuration file: /home/content/v/o/l/voltageking/html/includes/configure.php. This is a potential security risk - please set the right user permissions on this file.

I have gone to the "admin/includes/configure.php" file thru my hosting account file manager and changed the permissions but still getting the same message.

Does anyone know how to correct this. It occurred after I did a complete shopping cart delete and then restored an older copy because some problems I was was having.

Any Help is greatly appreciated!

Thanks,
Steve :-)

soundzgood2 · **Posted:** Sat Oct 29, 2011 1:37 pm

So what are the permission numbers on the two files set to? 444 is the usual (owner only read/write/execute)
(Also would recommend renaming your admin folder to something else)

Simon

VoltageKing.com · **Joined:** Mon Jan 17, 2011 3:55 pm **Posts:** 4

Thanks soundzgood2,

YES 444 worked!!!

I will rename the admin file but will that cause any problems with the site. Do any other files access the admin folder?

Thank you very much for your help!

soundzgood2 · **Posted:** Sat Oct 29, 2011 2:15 pm

Heheh ... everything in the admin folder accesses the admin folder, but it's simple to rename:

1. make sure you change the 3 /admin/ references in /admin/includes/configure.php
2. choose a hard to guess name for the admin folder
3. update any bookmarks you have which access the admin folder

Bout it - other point to mention: if you do ever go and upgrade your version (recommended), unfortunately the /admin/ paths in the upgraders are still (!) hardcoded in as /admin/, so you have to change the same things back to /admin/ to get the upgrader to work.

As a sideline - prestacart (which I think will blow oscommerce carts out of the water shortly) doesn't allow you to install the cart UNLESS you rename the admin. Sensible. Unfortunately their upgrader at this time is rubbish.

Simon

Loaded Commerce Community

Warning: I am able to write to the configuration file: ...

Who is online

Main Menu

Login

Forums Latest Activity

Top Listing

Members Online