admin pass & SSL

[rlbewick]

I have a clean install of OsCommerce on a local Mandrake 10.2 Linux server for test purposes before upload.

 

How do I set a password for the admin control panel? I have looked in the instructions but it's not very detailed.

 

Also I have a question about SSL. When I add the payment module, will payments be handled by SSL if SSL is not enabled? If SSL is required for this function is it possible to use a system generated SSL certificate? I have noticed how most Linux distibutations can accomplish this.

[♥Vger]

A cert generated by your control panel is a total waste of time - as it will not be a trusted certificate and will show an onscreen warning any time someone tries to go to an https page.

 

If this is a local install (Intranet as opposed to Internet) and you have a decent firewall on your computer then you don't need to password protect the admin folder. If you have your computer set up as a web server without a firewall then you're asking for trouble.

 

Vger

[rlbewick]

A cert generated by your control panel is a total waste of time - as it will not be a trusted certificate and will show an onscreen warning any time someone tries to go to an https page.

 

If this is a local install (Intranet as opposed to Internet) and you have a decent firewall on your computer then you don't need to password protect the admin folder. If you have your computer set up as a web server without a firewall then you're asking for trouble.

 

Vger

 

 

The server is connected to the Internet and simply want to lock down the Admin cpanel with a password. I want to do this on my local box so I know how before going to the fat pipe server. Of course, both servers sit behind good firewalls, not routers.

 

Will I need a SSL certificate to provide secure credit card transactions through my payment gateway?

 

Thanks :)

[♥Vger]

As this is your own server it's unlikely that you have a decent control panel to enable you to make the admin password protected with a good Graphical User Interface (GUI), so it's probably down to .htaccess for password protection. The best thing to do is to just do a Google search for 'password protection with .htaccess' and you'll get plenty of help.

 

You need SSL to encrypt the transfer of data when someone signs up to Register an account with you, when they edit that ccount, for the Checkout process, and when they Login and Logout with their e-mail address and password.

 

You can also use a full certificate to totally lock down your admin panel so it's only accessible by an https connection (encrypted data).

 

Vger