Downloaded and installed Magento 1.1.6 without any issue, but now when I try to download themes and extensions I get following message.
Error: Please check for sufficient write file permissions
Based on the installation guide I CHMOD the following file and folders to 777 magento/var/.htaccess, the directories magento/app/etc, magento/var, and all the directories under magento/media still got the same ‘insufficient write file permissions’ message searched the forum, almost all replies suggested to CHMOD all folders to 777 and files to 644 since I don’t have SSH I requested my host to do this for me but they refused stating 777 is a security risk (quote from hosting company)
777 _IS_ most indeed a security issue.
777 is like leaving the keys in your car in a mall parking lot, hoping nobody will take your car. There WILL be exploits, if not today, tomorrow - but there WILL be. ANYONE - ANYTIME can upload a script to that directory - execute it and wipe out your files, read your databases and potentially hijack a server.
My question to be able to download from Magento Connect except the file and folders mentioned above which files and folders do I need the change permission, or how can I download manually and ftp to server (I don’t know why this method is not provided) any help or suggestion short of changing host is appreciated.