Mets Posted March 11, 2005 Share Posted March 11, 2005 Hey guys, I just did a new, fresh, first-time installation of osCommerce on my website, and it worked great. I had to patch it with Vger's Register Globals patch (which worked great!) and I'm really excited I got things working. However, it worked a little bit too well. Anybody can login to my admin screen! The setup never asked me to make an admin username/password, so all you have to do is point to the site/catalog/admin directory in your browser and you get access to all of the admin controls. Anybody know how to fix this? Mets Link to comment Share on other sites More sharing options...
nevarlen Posted March 11, 2005 Share Posted March 11, 2005 Hey guys, I just did a new, fresh, first-time installation of osCommerce on my website, and it worked great. I had to patch it with Vger's Register Globals patch (which worked great!) and I'm really excited I got things working. However, it worked a little bit too well. Anybody can login to my admin screen! The setup never asked me to make an admin username/password, so all you have to do is point to the site/catalog/admin directory in your browser and you get access to all of the admin controls. Anybody know how to fix this? Mets <{POST_SNAPBACK}> Hey There, Following link describes the step by step instructions on how to secure the admin directory.. http://www.oscommerce.com/forums/index.php?showtopic=100815 Hope iti helps.. Link to comment Share on other sites More sharing options...
Mets Posted March 12, 2005 Author Share Posted March 12, 2005 Thanks a lot! That's a great mod Link to comment Share on other sites More sharing options...
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.