xcart5 ---trouble?
 

You have to change LOTS (most?) of permission setting?

Re: xcart5 ---trouble?
 

Some hosting providers require you to create files and directories under your personal account and restrict them for anyone else. Others require files to be writeable by some kind of an "apache" user.

There are general instructions, but you should consult with your hosting provider what are the secure file permissions for your server.

One more thing to consider is that when upgrading X-Cart 5 overwrites files on the server, so the user that runs PHP scripts must have enough permissions to do so.

Re: xcart5 ---trouble?
 

I mean that you have to change/limit all the permission for files in xcart directory?
such as from 777 to 755?

Re: xcart5 ---trouble?
 

It depends on your hosting provider and the server configuration.

For a better security you should consult with your server administrator on what file permissions should be set to allow PHP scripts overwrite files of X-Cart 5 files during the upgrade routine, but prevent other users on the same shared server from viewing or changing these files.

Some servers use your user account - on these 755 for directories and 644 for files should work. Others run PHP scripts as an "apache" users - on these you may need to set the permissions to 775/664 or 777/666.