Web Hosting - View Single Post

navaldesign · #**152** 03-31-2007, 06:56 AM

Quote:

Important security note:

Click on the button “ABVFP Control Panel”. If the next screen comes up, as it should, please take a minute and change back your “ABVFP” permissions to be “755”. Then, enter the folder itself, and change permissions to the files “dbts_install.php” and “dbts_ABVFP_install1.php” to be 000.

What do you mean by "change back your 'ABVFP' permissions to be '755'."? Is that just the folder ABVFP? or all the dbts_ABVFP files in the ABVFP folder?

The entire ABVFP folder permissions must be set back to 755.
Usually, the folder permissions are set to 755 by default. However, in some cases, depending on the particular server php settings, permissions set at 755 will NOT allow you to correctly install the software. In fact, the problem is that some servers, will not allow the automated creation of the file dbts_ABVFP_config.php which is essential for the functionin of the software. It is for this reason, that the entire folder is set to 777, and then, after installation, it is set back to 755. The files inside the ABVFP folder are 644, and such should remain.

Quote:

Also when you say "change dbts_install.php to be 000" . Are you just repeating that to stress it? or is this another folder by the same name that I did the step before?

No, that's a security measure. The files "dbts_install.php" and dbts_install1.php" are the files that install ABVFP on your site. They are INSIDE the ABVFP folder. If some malicious person finds out that you have ABVFP installed on your site, he can, through his browser, run again the file, and mess up your ABVFP. This is in fact very hard, as he would need also your database username and password, which is highly improbable. However, as a precaution, i advise turning these two files permissions in 000, so they become non accessible.