I have installed with the original dist-configure.php, works fine, any consequences?

I have installed zen-cart with the original files dist-configure.php I haven't made any privileges changes ( i am on a windows server) the shop works fine, I have personalized it etc... IS THERE ANY OTHER CONSEQUENCES IN SECURITY MATTERS?

See your /docs/ directory for security recommendations.

but what are the risks of leaving configure.php with write permissions.

Let me go read your file and get the info and when your database is blown and I have your passwords you can then come back and let us know what you think of this ... :eek:

That would be a very very bad thing to allow to happen ...

Set it to 644 or 444 and you may need to do this via your Control Panel if your host does not give you proper control over your own site to manage this yourself in your FTP ...

And, in some worse case scenarios ... you may need to change the permissions by contacting your host each and every time you want to touch the file ... (hint get a new host in this case) ... :cool:

I've stuck a test zen cart on windows, configure.php hasn't been secured.

I've tried to browse that file via IE and did a view source but nothing is showing.

Where's the risk?