Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Protect File Manager Directory in Admin


Recommended Posts

Can someone tell me how to password protect the file_manager.php and all the files beneath it in admin?

 

I have entered this into the Protected Directory of Plesk for the path (whih is correct)

 

/home/httpd/vhosts/abcdefghijkl.com/subdomains/oscommerce/httpdocs/catalog/admin/http://yaddayadda.abcdefghijkl.com/catalog/admin/file_manager.php

 

Created a user and password, however anyone with access to admin is still able to access file manager.

 

Any help is greatly appreciated.

Link to comment
Share on other sites

Can someone tell me how to password protect the file_manager.php and all the files beneath it in admin?

 

I have entered this into the Protected Directory of Plesk for the path (whih is correct)   

 

/home/httpd/vhosts/abcdefghijkl.com/subdomains/oscommerce/httpdocs/catalog/admin/http://yaddayadda.abcdefghijkl.com/catalog/admin/file_manager.php

 

Created a user and password, however anyone with access to admin is still able to access file manager.

 

Any help is greatly appreciated.

 

 

You need to pwd protect admin - not the individual files in it.

 

To do this

 

1) choose a new name for the dirctory (not admin1 or new_admin or something equally easy to guess !)

 

2) using plesk you can then set a user and pwd for this directory

 

3) make sure you change BOTH your configure.php files to reflect the new name you have given admin

 

BTW if you are trying to protect files in your admin directory from someone working on your site with your permission you need to be aware of what they are doing and when they are doing it - the above steps protect the directory from mr and mrs malicious.

 

Charles

A kite flies highest AGAINST the wind !

 

"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, a lover in one hand, martini in the other, body thoroughly used up, totally worn out and screaming ~ WOO HOO!! What a ride!"

Link to comment
Share on other sites

Thank you Charles for your response. I already have admin password protected. Would like to do so with file manager. Can you tell me how to do so?

 

You need to pwd protect admin - not the individual files in it.

 

To do this

 

1) choose a new name for the dirctory (not admin1 or new_admin or something equally easy to guess !)

 

2) using plesk you can then set a user and pwd for this directory

 

3) make sure you change BOTH your configure.php files to reflect the new name you have given admin

 

BTW if you are trying to protect files in your admin directory from someone working on your site  with your permission you need to be aware of what they are doing and when they are doing it - the above steps protect the directory from mr and mrs malicious.

 

Charles

Link to comment
Share on other sites

Thank you Charles for your response. I already have admin password protected. Would like to do so with file manager. Can you tell me how to do so?

 

you change permissions on files by chmod - go to the file you want to prevent others from reading, writing or executing and apply the permissions you want. 444 or 400 is good -

 

Just one question why are you wanting to do this ?

 

Charles

A kite flies highest AGAINST the wind !

 

"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, a lover in one hand, martini in the other, body thoroughly used up, totally worn out and screaming ~ WOO HOO!! What a ride!"

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...