Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

How to protect admin modul?


Guest

Recommended Posts

Hy i'm new here.

 

I like to protect admin modul. How can i do this? :(

 

In file manager i don't have any options to protect.

Link to comment
Share on other sites

Hy i'm new here.

 

I like to protect admin modul. How can i do this?  :(

 

In file manager i don't have any options to protect.

 

1) rename admin to something new that only you know - not obvious names like admin1 !)

 

2) go into your server management application (cpanel, plesk etc) and \ user password protect the directory - if you dont have such tools then you can do the same thing with .htaccess and .htpassword files

 

3) change your configure.php files (both of them) to reflect the new name you have given admin in step 1 above - then chmod both files to 400 or 444

 

all done

 

Charles

A kite flies highest AGAINST the wind !

 

"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, a lover in one hand, martini in the other, body thoroughly used up, totally worn out and screaming ~ WOO HOO!! What a ride!"

Link to comment
Share on other sites

1) rename admin to something new that only you know - not obvious names like admin1 !)

 

2) go into your server management application (cpanel, plesk etc) and \ user password protect the directory - if you dont have such tools then you can do the same thing with .htaccess and .htpassword files

 

3) change your configure.php files (both of them) to reflect the new name you have given admin in step 1 above - then chmod both files to 400 or 444

 

all done

 

Charles

Charles,

 

I have read a lot of activity on securing admin today. I have changed my admin folder to something else and updated the configure.php. I went to the configure.php in catalog/includes but I do not see a reference to admin. Everybody is saying change both files, but where in catalog/includes/configure.php do you change admin to a new name?

 

Thanks,

Tim

Link to comment
Share on other sites

3) change your configure.php files (both of them) to reflect the new name you have given admin in step 1 above - then chmod both files to 400 or 444

Hi again,

 

I changed my permissions to 400 and could not access admin. I had to put them back where they were. I received 3 error messages all relating to line 29 in application top. As soon as I undid the permission change to admin/includes/configure.php I was able to log in again.

Link to comment
Share on other sites

The only config file oyu need to change references in for 'admin' is in admin/includes/configure.php. There are two references to /admin/ which need to be changed to /newname/

 

With regard to permissions, it's pretty much dependent on the server you're on. Some accept 400, others 444, but some seem to only accept 644 (esp. Windows).

 

Vger

Link to comment
Share on other sites

Hi, Which 'File Manager' are you talking about. If you are talking about the osCommerce File Manager then you won't have any option to protect the 'admin' folder. It is in your web hosting control panel that you must look for Password Protection or Directory Protection.

 

Vger

Hy i'm new here.

 

I like to protect admin modul. How can i do this?  :(

 

In file manager i don't have any options to protect.

Link to comment
Share on other sites

Using .htaccess and .htpasswd seems difficult, but believe me it?s not that difficult. Search this forum like I did and soon you'll be protecting your folders.

 

Also, rename your admin folder.

Link to comment
Share on other sites

Using .htaccess and .htpasswd seems difficult, but believe me it?s not that difficult. Search this forum like I did and soon you'll be protecting your folders.

 

Also, rename your admin folder.

 

I've tried and tried and tried to get .htaccess to work on my site with no success. I've downloaded the contribution by J Larsen and have followed it to the letter but am still having problems.

 

Please could you point me at an idiots guide?

Link to comment
Share on other sites

I've tried and tried and tried to get .htaccess to work on my site with no success.  I've downloaded the contribution by J Larsen and have followed it to the letter but am still having problems.

 

Please could you point me at an idiots guide?

 

Is it that you can't use files like .htaccess cause you're using a webhost that doesn't allow files to start with a . or such?

 

Do you have any administrative tools provided by your webhost? Can you ftp in?

Link to comment
Share on other sites

  • 3 weeks later...

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...