Getting the following message under the status page under windows server 2008 r2 web edition:

http://localhost/index.php?q=admin/reports/status

The directory sites/default is not protected from modifications and poses a security risk. You must change the directory's permissions to be non-writable.

Tried tweaking the permissions with no luck. At one point, I added full permissions for everyone and it went away but that doesn't make sense.

CommentFileSizeAuthor
#2 perms.jpg45.96 KBcaptaingeek
#1 perms.jpg47.5 KBcaptaingeek
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

captaingeek’s picture

FileSize
47.5 KB

maybe posting how the directory permissions should like would be helpful.

captaingeek’s picture

FileSize
45.96 KB
Damien Tournoud’s picture

Title: The directory sites/default is not protected from modifications and poses a security risk. » is_writable() cannot be use to determine if a directory is writable (on Windows)
Version: 6.17 » 7.x-dev

That's just a new demonstration of Microsoft and PHP stupidity combined. I guess that you will discover that this directory now has the read-only flag set. PHP is definitely still a joke on Windows.

http://bugs.php.net/bug.php?id=27609

Bumping to Drupal 7, we fix bugs (if we can) in the current development branch before considering backports.

captaingeek’s picture

Cool thanks for the comment! WIMP users have been living with this since 5.x

AntonioGM’s picture

Same for me. In Windows you can't activate the read only flag for a folder using the GUI.