# Read-only mode > How read-only mode lets you browse, view and download files with DooFiles without changing anything, how to turn it on or off, and why it turns on by itself when wp-config.php sets DISALLOW_FILE_EDIT or DISALLOW_FILE_MODS. Source: https://doothemes.com/docs/doofiles/security/read-only-mode --- ## Overview In read-only mode, DooFiles lets you browse, view and download the files of your site, but not change them. Use it on sites where nobody should change files day to day: you keep a safe way to look at your files, and DooFiles cannot be used to change them. ## What you can and cannot do | You can | You cannot | |---|---| | Browse folders and search files | Save files in the editor | | Open files in the editor to read them (**View**) | Upload files | | Preview images, videos and PDF files | Create, rename, move or send files to the Trash | | Download files | Compress or extract zip files | | See the Activity log, the Space view and the Trash | Restore or delete items in the Trash | | Change the settings of DooFiles | Restore previous versions | | | Make a folder private or public | In read-only mode, the toolbar has no **Upload files**, **New file** or **New folder**, the right-click menu shows only the actions that do not change anything, and the indicator at the bottom of the folder panel reads *Read-only mode*. ## Turn it on or off 1. Go to **DooFiles › Settings** and open the **Security** card. 2. Turn **Read-only mode** on or off. 3. Click **Save changes**, and confirm your password. The file manager shows a notice while it is on: *Read-only mode is turned on in the DooFiles settings. You can browse, view and download files, but not change them.* [SCREENSHOT_HERE: The file manager in read-only mode, with the notice at the top, no Upload files button and the indicator reading Read-only mode] ## When it turns on by itself ### DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS WordPress lets you lock its file editors with these lines in `wp-config.php`: ```php define( 'DISALLOW_FILE_EDIT', true ); define( 'DISALLOW_FILE_MODS', true ); ``` DooFiles respects them: if either one is set, it works in read-only mode, and the file manager tells you which one: *Read-only mode: DISALLOW_FILE_EDIT is turned on in wp-config.php.* In **DooFiles › Settings**, the **Read-only mode** row shows as locked, because it can only be turned off in `wp-config.php`. To change files with DooFiles on that site, remove that line from `wp-config.php` (or set it to `false`), by FTP or with the file manager of your hosting. Keep in mind that these lines also lock the theme and plugin editors of WordPress, and with `DISALLOW_FILE_MODS`, installing and updating plugins and themes. ### A developer turned it on If the file manager says *Read-only mode is turned on for this site.*, a developer turned it on in the code of your site. The **Read-only mode** row in the settings shows which filter. See [Filters and constants](https://doothemes.com/docs/doofiles/developers/filters-and-constants). ### Your site asks for a second factor If your site asks every administrator for a [second factor](https://doothemes.com/docs/doofiles/security/second-factor), administrators who have not turned on theirs work in read-only mode until they do. The file manager tells them, with a **Turn on your second factor** link. ## Troubleshooting | Problem | What to do | |---|---| | I cannot turn off read-only mode in the settings | The row is locked by `DISALLOW_FILE_EDIT` or `DISALLOW_FILE_MODS` in `wp-config.php`, or by a developer filter. The row says which one | | Read-only mode turned on after an update or a security plugin | A plugin or your hosting may have added `DISALLOW_FILE_EDIT` to `wp-config.php`. Check that file | | Only some administrators are in read-only mode | Your site asks for a second factor, and they have not turned on theirs | | The menu shows **View** instead of **Edit** for one file only | DooFiles is not in read-only mode: the server does not let PHP write that file. Check its permissions | Need more help? [Open a support ticket](https://doothemes.com/account/tickets/new).