Hi, I am fairly new to CMS although I can modify some php coding.

I installed Drupal and after intallation I faced the following message:

warning: is_file() [function.is-file]: Stat failed for files/.htaccess (errno=13 - Permission denied) in /home/m4tt/public_html/cms/includes/file.inc on line 115.
warning: fopen(files/.htaccess) [function.fopen]: failed to open stream: Permission denied in /home/m4tt/public_html/cms/includes/file.inc on line 117.
Security warning: Couldn't write .htaccess file. Please create a .htaccess file in your files directory which contains the following lines:
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
Options None
Options +FollowSymLinks

In general the cms seems to working fine and the only thing this error wont let me do is customise the themes. I can upload new themes I just can't configure them.

I did have a warning when I first set up the cms saying that it could not find the file dir so i set one up and chmod it.

I hope that should be enough information to resolve it. If you need any more info please let me know.

Thanks in advance

Comments

ff1’s picture

Matt,

Did you create a .htaccess file within the file directory? This .htaccess file must contain the line
SetHandler This_is_a_Drupal_security_line_do_not_remove

Please see http://drupal.org/node/65409 for more details.

ian
Fantasy Formula 1

matthew smith’s picture

Once I unzipped and installed the cms i did not have a "files" directory. I created a files directory. however I don't know how to creat a .htacess file with the above command.

could any one help me create this file or let me know what program i need to do this

matthew smith’s picture

I assume there is no easy way to do this then

Jeff Burnz’s picture

Just use a text editor. Create a new file with your text editor, paste in:

SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
Options None
Options +FollowSymLinks

and save it as .htaccess & upload it.

stemann’s picture

I have added the .htaccess file to the files folder, but am still getting this warning below.

warning: is_file() [function.is-file]: Stat failed for files/.htaccess (errno=13 - Permission denied) in /var/www/xxxxx/xxxxxxx.com/xxxxxx/includes/file.inc on line 115.
warning: fopen(files/.htaccess) [function.fopen]: failed to open stream: Permission denied in /var/www/xxxxx/xxxxxxx.com/xxxxxx/includes/file.inc on line 117.

Your help is appreciated.

bews’s picture

if youre on linux box chmod the files dir to 777 .. make sure you have a .htaccess file in the files directory and make sure you can write to the .htaccess file

Just went through the same issue

good luck

thatONEjustin’s picture

I don't mind chmod - ing the file. But to 777? Do I have to leave it like this? it sounds like a massive security hole.

Anonymous’s picture

Hi...
I have the same problem and although I have already done what I was told to, I have still the same warnings.