DannyM Posted January 24, 2005 Posted January 24, 2005 Hi all, I want to ensure, that only admins may create new accounts, so the create_account.php should be moved into the (htaccess-secured) http://www.mydomain.com/catalog/admin/ area. Today everyone can add an account while opening http://www.mydomain.com/catalog/create_account.php. I already added the contributions where only registered customers can enter the shop, but now I need a mechanism preventing the whole world creating new accounts while knowing the exact OsC path to account creations. Has anyone an idea how to manage this? Thanks, Danny
ozcsys Posted January 24, 2005 Posted January 24, 2005 Hi all, I want to ensure, that only admins may create new accounts, so the create_account.php should be moved into the (htaccess-secured) http://www.mydomain.com/catalog/admin/ area. Today everyone can add an account while opening http://www.mydomain.com/catalog/create_account.php. I already added the contributions where only registered customers can enter the shop, but now I need a mechanism preventing the whole world creating new accounts while knowing the exact OsC path to account creations. Has anyone an idea how to manage this? Thanks, Danny <{POST_SNAPBACK}> I am assuming that you have already removed all your create account links. If so just rename the file to something else only you know, mysecretname.php then nobody can get to it by going directly to the file. The Knowledge Base is a wonderful thing. Do you have a problem? Have you checked out Common Problems? There are many very useful osC Contributions Are you having trouble with a installed contribution? Have you checked out the support thread found Here BACKUP BACKUP BACKUP!!! You did backup, right??
DannyM Posted January 24, 2005 Author Posted January 24, 2005 Yes, this would be the most easiest way. But this is not even secure. To move the account-creation page to another directory, many includes and paths need to be adjusted, right?. Any ideas how to secure the account-creation page? Thank you very much for your ideas ... Danny
ozcsys Posted January 24, 2005 Posted January 24, 2005 Yes, this would be the most easiest way. But this is not even secure.To move the account-creation page to another directory, many includes and paths need to be adjusted, right?. Any ideas how to secure the account-creation page? Thank you very much for your ideas ... Danny <{POST_SNAPBACK}> Yes if you need to move the file to a different folder then you will need to change the paths in the file as it will no longer be able to use the defaults. It would be a bit of a pain but nothing that cannot be done. If you need it done then you need to go through the file and make the changes. The Knowledge Base is a wonderful thing. Do you have a problem? Have you checked out Common Problems? There are many very useful osC Contributions Are you having trouble with a installed contribution? Have you checked out the support thread found Here BACKUP BACKUP BACKUP!!! You did backup, right??
Recommended Posts
Archived
This topic is now archived and is closed to further replies.