Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Securing my osc store


Guest

Recommended Posts

Hello,

 

first off: I know this question is asked ALL the time. However I think that's what makes finding an answer so difficult, there's just far to much information to sort through. Plus I've found the search feature is wierd for this forum, i always have trouble pulling up what I want.

 

Anyways, as the title says, I'm looking to secure my osc store. I don't really know how to start off, or what to do.

 

I guess I need an SSL certificate, and the stores hosting is w/ a business package w/ rackspace (not sure on specific's, it's just what Im working with).

 

But than, I've also heard simply adding https:// to links will do the trick, however when I do that it takes the user to a dead link.

 

It must be because I have both an httpdocs/ and httpsdocs/ directory to store files to. So than I figure it must mean I have to upload files to both httpdocs/ and httpsdocs/. Is this true? Also, if i do that will OSC pass variables correctly? Or will it lose shopping cart info during the changes? Also, what files do I need to upload to one or the other? With the amount of files in the OSC install, I find it redundant and wastefull to upload the whole site to both directories. Plus it adds more room for error in working with one or the other. Development time goes up as well.

 

Anyways, I'm just sorting through a lot of that in my head (by typing it out) to try and give me a better understand. I hope some of you can help me in securing my osc store (and also the admin panel).

 

Thank you.

 

-Nick

Link to comment
Share on other sites

The best thing for you to do is contact your hosting company before you do anything. You will need to purchase a ssl certificate but setting them up varies a lot from company to company. Normally you should not need to have a seperate set of files to run with a certificate but some hosts do require this. The only thing osC requeires is that you set ssl to true and set your secure path in your two configure. php files.

The Knowledge Base is a wonderful thing.

Do you have a problem? Have you checked out Common Problems?

There are many very useful osC Contributions

Are you having trouble with a installed contribution? Have you checked out the support thread found Here

BACKUP BACKUP BACKUP!!! You did backup, right??

Link to comment
Share on other sites

Thanks for the help. I'll contact my host and see what they say.

 

The best thing for you to do is contact your hosting company before you do anything. You will need to purchase a ssl certificate but setting them up varies a lot from company to company. Normally you should not need to have a seperate set of files to run with a certificate but some hosts do require this. The only thing osC requeires is that you set ssl to true and set your secure path in your two configure. php files.

Link to comment
Share on other sites

Hello,

 

first off: I know this question is asked ALL the time. However I think that's what makes finding an answer so difficult, there's just far to much information to sort through. Plus I've found the search feature is wierd for this forum, i always have trouble pulling up what I want.

 

Hi Nick:

 

Yeah, search is clunky, no doubt about it. And unfortunately it's a vicious cycle--every time somebody posts a common question again because they can't find the answer they're looking for, the clutter just gets worse.

 

I got my first SSL cert just about a year ago. Picked up almost everything I needed to know from the cert vendor (EV1 Servers), the WHT forums, the cPanel forums, and the data center where I keep my server. Once I got the cert installed, configuring osCommerce for secure pages was a breeze (but I don't have httpdocs/ and httpsdocs/ directories--that sounds painful).

 

I'm still not sure why people look for general SSL info on these forums--there are better places to go. Cheers.

"Buy the ticket, take the ride..." -HST

Link to comment
Share on other sites

(but I don't have httpdocs/ and httpsdocs/ directories--that sounds painful).

 

That's one of the biggest concerns I have right now.

 

I'm still not sure why people look for general SSL info on these forums--there are better places to go. Cheers.

 

The main reason (why i came here) is because oscommerce is the first time I've had to use SSL and the like. Being as how it's my first instance of using it, it makes sense to go here (to me) to get specific examples of implementing it.

 

I'm going to check around with other sources soon to try and fix this problem.

 

Thank you for the help.

 

-Nick

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...