Securing the admin area

[andytc]

Hi

 

I'm testing out osCommerce and have a question regarding security.

 

My host offers "one click install" of a few programs including osC.

 

After the host program (fantastico) has installed osC it prompts me to "click here to secure the admin area" and finish installation.

 

i notice from the osC install doc that it mentions "re-naming" the admin dir ...

 

"Do the same for the 'admin' directory but rename the directory to a

unique and secret name. This directory does not have to reside inside the

catalog directory, though may need to be manually configured."

 

 

My admin DIR is still called ADMIN ? should i leave it as is or re-name it ?

 

If i re-name it , will it cause problems with my current install?

 

Cheers

[dahui]

there is a lot of info on board, which I think clearly states why and how to protect the admin dir

 

secure the directorie with .htaccess if you want to rename it and place it somewhere else then in catalog you need to change the name and path in the admin config file

  define('DIR_WS_ADMIN', 'XXXXXXX'); // absolute path required
 define('DIR_FS_ADMIN', 'XXXXXX'); // absolute pate required

 

dahui