Horde Always "configurable" even after secure.sh

Evans, Tim Tim_Evans@troweprice.com
Tue, 28 Nov 2000 21:10:39 -0500 

I have installed Horde 1.2.3 and IMP 2.2.3 on a Cobalt RAQ4i (Linux).

After having configured phplib, working through the 11-step IMP
config, and running 'secure.sh' to set permissions to 000 on
index.php3, setup.php3, etc., I still get "Horde is configurable,
run secure.sh" when I access the page.  From what I can see,
all permissions are correct.

As a debug, I copied the index.php3 to another file, and added
some print statements to see which of the tests are failing.  Here
is the modified script, with very crude print statements:<?php

/*
  
  File: index.php3
  
  Horde: Copyright 1999 Charles J. Hagenbuch  <chuck@horde.org>
  
  You should have received a copy of the GNU Public
  License along with this package; if not, write to the
  Free Software Foundation, Inc., 59 Temple Place - Suite 330,
  Boston, MA 02111-1307, USA.
  
*/

$horde_configured     = false;
$horde_configured     = file_exists('./config/horde.php3');
$horde_configurable   = (is_readable('./setup.php3') &&
is_writeable('./config/h
orde.php3'));

if ($horde_configured && ! $horde_configurable) {
print FIRST;
  if (!defined("HORDE_LIB")) include './lib/horde.lib';
print SECOND;
  $this_client = new WebClient;                            
  if ($this_client->frames && ! $this_client->lynx) {
print THIRD;
    include './templates/index/frames_index.inc';         
  } else if ($this_client->lynx) {
print FOURTH;
    include './modules.php3';
  } else {
    include './templates/index/unknown_browser.inc';     
print FIFTH;
  }
} else if ($horde_configurable) {
print SIXTH;
  include './templates/index/horde_configurable.inc';   
} else if (!$horde_configured) {
  include './templates/index/horde_notconfigured.inc'; 
print SEVENTH;
}

?>

Running php directly on the script produces this output:

[root horde]# php foo.php3
X-Powered-By: PHP/4.0.3pl1
Content-type: text/html

SIXTH<html>
<head>
<title>Horde is configurable</title>
</head>

<body bgcolor="white" text="black">

<h3 align="center"><font color="red">ERROR: HORDE IS
CONFIGURABLE</font></h3>

<p>Your Horde installation is currently configurable from the web.
<p>The only time that your Horde installation should be configurable is if
you wish to use <a href="setup.php3">setup.php3</a>. Otherwise your users
could run the setup.php3 program themselves.
<p>To fix this you can run:
<ul>
<li><code>chmod 000 &lt;your horde dir&gt;/setup.php3</code>
</ul>

</body>
</html>

As you can see the "SIXTH" print statement is produced.

What is wrong here?  Thanks.