Hi,

> I don't understand why this bug has triggered a discussion about the 
> mandatority of file rights check, they are mandatory, just the message is 
> wrong if config.inc.php is not 444.

Because it was misunderstood. And discussions are fun, aren't they :-)))

Alright, got your point now. 

$ chmod 777 config.inc.php brings 

"Information:
Your system doesn't fit the system requirements. More information can be found 
in the system requirements check.
Please delete directory: setup!
Due to security reasons put your config.inc.php file to read-only mode!"

chmod 644 config.inc.php (on my system) brings

"Information:
Please delete directory: setup!"

In case $ chmod 777 config.inc.php the first message "Your system doesn't fit 
the system requirements..." shall be ditched.


Regards
Marco



-----Ursprüngliche Nachricht-----
Von: [email protected] 
[mailto:[email protected]] Im Auftrag von Christopher 
Simon
Gesendet: Mittwoch, 4. August 2010 17:07
An: [email protected]
Betreff: Re: [oxid-dev-general] System requirements for file rights shouldbe 
mandatory?

Hi Marco,

i don't speak about the installation. I'm talking about the admin area of an 
already installed shop. If you have config.inc.php any more permissive than 
444, the admin area says "The shop doesn't meet the system requirements". And 
this is fatally wrong. The shop meets the system requirements, but 
config.inc.php is not 444. This message is new, it wasn't there in earlier 
versions. The security of confic.inc.php has nothing to do with the 
functionality of the shop, only with the security.

Thats my point. 

I don't understand why this bug has triggered a discussion about the 
mandatority of file rights check, they are mandatory, just the message is wrong 
if config.inc.php is not 444.

_______________________________________________
dev-general mailing list
[email protected]
http://dir.gmane.org/gmane.comp.php.oxid.general
_______________________________________________
dev-general mailing list
[email protected]
http://dir.gmane.org/gmane.comp.php.oxid.general

Reply via email to