Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Admin and catalog folders with security


angel17846

Recommended Posts

I have read lots about this topic, but I haven't seen a post where someone has given there directory structure for all the osCommerce files.

 

I have my own SSL certificate. My host has two folders to upload to: httpdocs and httpsdocs. It is my understanding that I need to upload the catalog to both folders. Is this true?

 

Do I also need two copies of the Admin folder in both secure and non-secure directories? I tried just uploading admin to https, but the admin homepage is still linking to the non-secure pages. So, could I just leave one copy in http and password protect the non-secure admin directory?

 

Someone give me a glance at your director structure; this is mine currently.

 

httpdocs/catalog/

httpdocs/catalog/admin

httpsdocs/catalog

httpsdocs/catalog/admin

 

This seems redundant and a waste of space. And I surely don't want to upload twice when I change the layout.

 

Please, any help would be greatly appreciated.

Angel

Link to comment
Share on other sites

You are correct - it is a waste of space - not to mention time and effort. The reason for it is solely due to the way in which your hosting company has structured their server. There is no rational or sane reason for it!

 

I'm afraid that you do need to duplicate almost everything - and more than that you also have to apply any and all changes to both sets of files. The only thing you don't need (and should not have) in httpdocs is 'admin'.

 

Vger

Link to comment
Share on other sites

Yes, you do, but a better way is to simply contact your host and tell them that you want your HTTP and HTTPS document roots to be the same. It's a simple configuration thing for them to do.

 

-jared

Link to comment
Share on other sites

You are correct - it is  a waste of space - not to mention time and effort.  The reason for it is solely due to the way in which your hosting company has structured their server.  There is no rational or sane reason for it!

 

I'm afraid that you do need to duplicate almost everything - and more than that you also have to apply any and all changes to both sets of files.  The only thing you don't need (and should not have) in httpdocs is 'admin'.

 

Vger

 

 

Thanks so much for the reply. If they don't have to make two separate directories, I don't know why they would. I'm taking admin out of httpdocs right now.

 

Thanks,

Angel

Link to comment
Share on other sites

Yes, you do, but a better way is to simply contact your host and tell them that you want your HTTP and HTTPS document roots to be the same. It's a simple configuration thing for them to do.

 

-jared

 

 

I just emailed my host to ask if they could do this for me. Cross your fingers. Thanks for the reply!!

 

Angel

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...