How do I protect admin when host doesn't have ,htaccess

[virginia10thk]

Hi

 

Can anyone tell me how I can protect my admin section without .htaccess.

 

I tried contributions and adminlogin 5.0.5. doesn't work which I discovered on searching the forum.

 

Somebody mentioned changing the name of the admin folder but when I did this I got errors trying to access pages inside admin as the browser was still looking for /admin/ folder not the one I renamed it too.

 

Can anyone help me with this in simple steps of what I need to change and where to get an admin folder name change to work?

 

Thanks in advance :blink:

[virginia10thk]

anybody have a solution?

[kgt]

Any webserver worth it's salt can password protect a folder via HTTP Authentication. Any host worth it's salt will make their webserver do this for you. If you cannot get other contributions to work, then you must contact your host and get the directory protected. If they will not do it, drop them like a bad habit.

 

Changing the name of your admin folder is a good step, but it is NOT to be considered protection. It's only a way of making it harder for someone to find it. (Like hiding a diamond ring in the kitchen pantry instead of in a jewelry box.) You still need to protect it with a password.

 

When you change the name of the admin folder, you must edit admin/includes/configure.php to reflect the changed directory name.

[dave111]

This contribution will do it:

http://www.oscommerce.com/community/contributions,1174

 

There are other contribs too, which are simpler, but this one has all the admin featuers you could need.

 

**P.S. If your hosting is so crap that is doesnt even allow .htaccess files....you may want to switch hosting now**

[kgt]

**P.S. If your hosting is so crap that is doesnt even allow .htaccess files....you may want to switch hosting now**

 

Just a clarification:

 

.htaccess files are specific to the Apache webserver. If your host is Windows and IIS, you will still be able to have password protected directories, but .htaccess file means nothing to IIS. .htaccess files are a method Apache can use to implement HTTP Authentication for a directory. IIS uses another method with the same result. If you try to upload an .htaccess file to a Windows IIS server, don't be surprised if it doesn't work.

[virginia10thk]

Thanks guys.

 

Will try that contribution now.

 

"Host" is actually isp which allows me to host three domains for free with a mysql and a ccgi server. They recently changed from a cgi server to a ccgi server and it's not allowing .htaccess protection.

 

If my site goes well then I will change to paid hosting in the future.