Site/config.php not writable but readable?

[Speed]

I understand writable need to be locked and make it readable inside config.php. But... I am not sure I understand what I need to do to make writeable locked after reading from this link https://processwire.com/docs/security/file-permissions/#securing-your-site-config.php-file.  I opened config.php and could not find what I need to change.  Can anyone give me idea what I need to do? 

This came from after completion of PW installation. 

[deltavik]

To lock and protect the file, you will have to modify its permissions on the file system. To do that, you will have to execute "chmod 400 config.php" on command line. There is no "setting" inside config.php. 

To run that command,  you will have to gain ssh access to the server. If ssh is not your thing, you can change file permissions in your FTP client as well -- at least most FTP clients support it. In your FTP client, right-click on config.php and and click on file permissions. Then set the permissions to 400. 

 

 

[Doug G]

Or if you have a local setup like I do on windows w/xampp, you'd navigate to the config file in windows explorer, right-click and choose the security tab to access the permission settings.  Windows ntfs doesn't understand chmod and linux permissions.

I used to run php on a shared commercial windows-based host and their control panel had a permissions tool, since using ftp clients wouldn't properly change permissions on ntfs.

 

[Speed]

Thank you deltavik and Doug G. for clarification. I had permission changed by visiting host's cPanel > File manager.  Oh, FTP Filezilla didn't work. It keep on changing after I enter 400. As much I prefer using FTP over cPanel filemanager It'd be nice to know which FTP will work, Anyone?  Should I change Writable Permission for htaccess too? 

[deltavik]

dont think you need to secure htaccess. If it were important, PW would've mentioned it. 

Moreover, at least in wordpress world, there are third-party plugins that need to edit htaccess file. 

[Speed]

Thank you deltavik.