Is it there a way to secure the administration page?

[carloscanas]

I wonder if there is a way to secure the administrtation page. As it is anyone can access the administration page and change anything they want, from payment options to store names, etc. There is no way to secure it even to setup a user name and password to lock access to the site. The only way is modifying the Apache config files. Is it there any other way?

 

Thanks <_<

[Jack_mcs]

Check your hosts control panel for a Pasword Protection option. If they don't have one, then search the forums for "password protection" or "htaccess."

 

Jack

[trybicki]

YOU COULD JUST RENAME THE /ADMIN FOLDER TO SOMETHING ONLY YOU KNOW.

 

NOW IT'S SECURE! :D

[PD_Steve]

Hehe, it would be secure if you renamed it... however it would also stop working unless you changed the relevant entry in the admin configure file (at least that might make it work again, not sure if any coded URL is hardcoded to stop that).

 

The .htaccess and .htpasswd is the best way to go if you have the permissions to use that function (you should have really as part of the package your given). Then the directory is protected with a Unix style login which will stop all but the most determined hacker (as the Unix login is not 100% secure as it was never designed to be the default protection for sites...)

 

Alternatively, if your really really concerned about access to this area you could install protection software, however most of those packages were designed originally to protect other** types of sites.

 

** namely being sites of a more dubious and defintely more revealing nature :)

 

Steve

[Jack_mcs]

YOU COULD JUST RENAME THE /ADMIN FOLDER TO SOMETHING ONLY YOU KNOW.

 

NOW IT'S SECURE! :D

I'm not sure if this was meant as a joke or not but, in case someone takes it serious, renaming the admin does not make it secure. Use a password protection method as I already mentioned.

 

Jack