# Hello after all instal i have one message for security but i can resolve it

**URL:** <https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023>\
**Category:** Installing my Dolibarr\
**Created:** [March 15, 2022, 12:13pm UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023 "2022-03-15T12:13:41Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![jokooo](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/j/d78d45/32.png) [@jokooo](https://www.dolibarr.org/forum/u/jokooo)\
**Post date:** [March 15, 2022, 12:13pm UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/1 "2022-03-15T12:13:41Z")

</div>

i don’t know where I need to change here ?

Warning, your config file ( **htdocs/conf/conf.php** ) can be overwritten by the web server. This is a serious security hole. Modify permissions on file to be in read only mode for operating system user used by Web server. If you use Windows and FAT format for your disk, you must know that this file system does not allow to

 ![20220315_130147](https://www.dolibarr.org/forum/uploads/dolibarrorg/original/2X/0/0e7c725206923244f0274813b99383c10170d9c8.jpeg)  
add permissions on file, so can’t be completely safe. All security warnings (visible by admin users only) will remain active as long as the vulnerability is present (or that constant MAIN\_REMOVE\_INSTALL\_WARNING is added in Setup-\>Other Setup).

thank you

---

<div class="post-metadata">

**Author:** ![priojk](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/priojk/32/6121_2.png) [@priojk](https://www.dolibarr.org/forum/u/priojk)\
**Post date:** [March 15, 2022, 1:50pm UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/2 "2022-03-15T13:50:42Z")

</div>

Hi,

you need to to change the access rights of the file conf.php within your file system to ‘read only’.

If you are using Windows with a drive fomatted in FAT format (instead of NTFS), this is not possible - your system will remain insecure, but you can disable the warning as described in the message by setting the variable.

---

<div class="post-metadata">

**Author:** ![jokooo](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/j/d78d45/32.png) [@jokooo](https://www.dolibarr.org/forum/u/jokooo)\
**Post date:** [March 15, 2022, 2:51pm UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/3 "2022-03-15T14:51:07Z")

</div>

thank you for answer me  
I use Mac I don’t use windows  
how I can change the access rights of fille conf.php ?  
i change from dolibrr or from file inside MAMP ?

---

<div class="post-metadata">

**Author:** ![jokooo](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/j/d78d45/32.png) [@jokooo](https://www.dolibarr.org/forum/u/jokooo)\
**Post date:** [March 15, 2022, 3:03pm UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/4 "2022-03-15T15:03:03Z")

</div>

sorry I don’t know more in php  
i don’t know how I change it for reed only

---

<div class="post-metadata">

**Author:** ![priojk](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/priojk/32/6121_2.png) [@priojk](https://www.dolibarr.org/forum/u/priojk)\
**Post date:** [March 15, 2022, 3:19pm UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/5 "2022-03-15T15:19:11Z")

</div>

Sorry for having been unclear: There is no need to change anything in PHP.

In the filesystem of your PC you just need to locate the conf.php file and change the access rights. On a Mac, this can be done with the “Finder”.

> **[Change permissions for files, folders or disks on Mac](https://support.apple.com/en-gb/guide/mac-help/mchlp1203/mac)**
>
> On your Mac, assign permissions that allow users and groups to see or change a file, folder or disk.

---

<div class="post-metadata">

**Author:** ![jokooo](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/j/d78d45/32.png) [@jokooo](https://www.dolibarr.org/forum/u/jokooo)\
**Post date:** [March 16, 2022, 9:15am UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/6 "2022-03-16T09:15:18Z")

</div>

ok i will try do this  
relly thank you so much for my help  
thank you

---

<div class="post-metadata">

**Author:** ![jokooo](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/j/d78d45/32.png) [@jokooo](https://www.dolibarr.org/forum/u/jokooo)\
**Post date:** [March 16, 2022, 9:23am UTC](https://www.dolibarr.org/forum/t/hello-after-all-instal-i-have-one-message-for-security-but-i-can-resolve-it/22023/7 "2022-03-16T09:23:22Z")

</div>

I try it and its ok its workingng  
no message is gone  
than you very much again
