I am trying to install this script for a client and all is fine except the admin folder

When trying to go to admin from the browser I get this error


Server error!
The server encountered an internal error and was unable to complete your request.

Error message:
Premature end of script headers: index.php

If you think this is a server error, please contact the webmaster.

Error 500
www.ebookstoredeals.com
Tue Oct 30 22:08:16 2007
Apache/2.0.54 (Debian GNU/Linux) mod_auth_pgsql/2.0.2b1 mod_ssl/2.0.54 OpenSSL/0.9.7e


The folder permissions are 755 and I can't find a .htaccess file that has been included with the script. I changed the folder to 777 just to check ( I don't know a great deal about file permissions but I know 777 means "tha can do owt wi it" )

Any help would be much appreciated

Syntax error in the script :huh:

The script that it tries to call is index.php but it has no php in it at all. It is just a really short bit of html.

If instead of just typin

www.domain.com/admin

I actually try to browse to one of the individual pages withing the folder it gives the same error but just changes the script name in the error message. Its something with the folder. Its as if there is a .htaccess file with an error but I just cannot find one. Is there any way to check if it trying to call one before throwing out the error.

for your info this is the configuration file. Don't think it will help but maybe you might spot something in it.


<?php
/*
osCommerce, Open Source E-Commerce Solutions
http://www.oscommerce.com

Copyright (c) 2003 osCommerce

Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
define('HTTP_SERVER', 'http://www.ebookstoredeals.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTP_CATALOG_SERVER', 'http://www.ebookstoredeals.com');
define('HTTPS_CATALOG_SERVER', '');
define('ENABLE_SSL_CATALOG', 'false'); // secure webserver for catalog module
define('DIR_FS_DOCUMENT_ROOT', 'home/www/ebookstoredeals.com/'); // where the pages are located on the server
define('DIR_WS_ADMIN', 'http://www.ebookstoredeals.com/admin'); // absolute path required
define('DIR_FS_ADMIN', 'home/www/ebookstoredeals.com/admin'); // absolute pate required
define('DIR_WS_CATALOG', 'http://www.ebookstoredeals.com/'); // absolute path required
define('DIR_FS_CATALOG', 'home/www/ebookstoredeals.com/'); // absolute path required
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

// define our database connection
define('DB_SERVER', 'supremecenter52.com'); // eg, localhost - should not be empty for productive servers
define('DB_SERVER_USERNAME', '*******');
define('DB_SERVER_PASSWORD', '*******');
define('DB_DATABASE', '*******');
define('USE_PCONNECT', 'false'); // use persisstent connections?
define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'
?>

Call me a bit paranoid but is putting the user name and password for your database on a public forum a good idea?

Call me a bit paranoid but is putting the user name and password for your database on a public forum a good idea?

I think an edit would be useful :)

Do the access/error logs show any pointers?

Call me a bit paranoid but is putting the user name and password for your database on a public forum a good idea?

Ooopps

Thought that info was in the other configuration file. I even thought about that as well


Thanks - Now edited

Do the access/error logs show any pointers?

The host he uses doesn't allow access to them which I find bizzare

So I figured that all the other files were set to 644 and changed the admin files to this. It now works.

I am a little confused though. I thought 777 meant absolutely no protection on the files at all


Thanks

777 allows read/write/execute. many hosts dont allow files with the execute permission set to be viewed via http, for security reasons.