OSCommerce FAQ: Warning: I am able to write to the configuration file
Sometimes on a new osCommerce installation the following message appears at the top of the screen ...
Warning:
I am able to write to the configuration file:
/home/path/to/your/config/files/configure.php
- This is a potential security risk - please set the right user permissions on this file.
despite the apparant protection from making it group and world read only (0644),
the message is literally correct as the file is writable.
Two solutions exist
- the quick-and-dirty solution is to chmod the file to be 0444
- the more elegant and preferred solution is to edit the osCommerce code to check for the file being world writable
- see the fix discussion on the official forums at
http://forums.oscommerce.com/index.php?showtopic=73797
