Two Important Questions

[TheCheshireCat]

Hey guys!

I have recently installed this great system on my server, and I have 2 questions-

 

1. What is "Safe Mode"? I can't seem to perform any administartive actions while this is on. How do I turn it off?

 

2.Is this system protected? As in are there ways for hackers to get my customer's credit card numbers etc.?

 

 

Thanks!

 

Tom

[Jack_mcs]

Safe mode is a server setting. You will need to talk to your host about that. For hackers, you need to be sure your admin is password protected, install an ssl certificate and be sure you have the latest update of oscommerce installed.

 

Jack

[TheCheshireCat]

So to use OsCommerce safemode has to be active on my server? Is there a way not to have OsCommerce require it activated?

[Jack_mcs]

NO, the other way around. Your host has safe mode enabled and some part of oscommerce doesn't like it.

 

Jack

[TheCheshireCat]

I contacted the server and he said I just had a problem with my sessions, does that make sense? Also how may it be solved?

http://www.copyc.org/oscommerce/catalog/index.php

[Jack_mcs]

Be sure your sessions setting in includes/configure.php file is set to mysql.

 

Jack

[boxtel]

I contacted the server and he said I just had a problem with my sessions, does that make sense? Also how may it be solved?

http://www.copyc.org/oscommerce/catalog/index.php

 

never actually spoke to a server before but when he would say "I just had a problem with my sessions" I would call him a moron.

[TheCheshireCat]

Be sure your sessions setting in includes/configure.php file is set to mysql.

 

Jack

 

How do I do this? I tried but it didn't seem to work.

[Jack_mcs]

Use this setting in your configure file

define('STORE_SESSIONS', 'mysql');

 

Jack

[jesma]

^^ That should work, it did for me!

 

About the brief mention of SSL..

 

I bought my webhosting which advertised free SSL with it. However, (I'm using FileZilla FTP) I can only connect with the selection "FTP over TLS (Explicit Encryption)". I talked to my host and he seemed to say that was the sucure SSL connection I need. But theres another option "FTP over SSL (explicit encryption)".. but it doesn't work, gives error and can't access the server, even though it sounds more likely to be what I want!?

 

Does anyone know what I can do?

 

Can I buy an SSL certificate from somewhere else and get the host to install it for me, even though the hosting company claim to have it?

[TheCheshireCat]

Sorry but it still won't work :S

 

heres what I wrote in catalog/includes/configure.php : define('STORE_SESSIONS', 'mysql')

 

http://www.copyc.org/oscommerce/catalog/admin/

 

This is the whole file:

 

<?php

/*

$Id: configure.php,v 1.14 2003/07/09 01:15:48 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', ''); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', ''); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', false); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', '');

define('HTTPS_COOKIE_DOMAIN', '');

define('HTTP_COOKIE_PATH', '');

define('HTTPS_COOKIE_PATH', '');

define('DIR_WS_HTTP_CATALOG', '');

define('DIR_WS_HTTPS_CATALOG', '');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', ''); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '');

define('DB_SERVER_PASSWORD', '');

define('DB_DATABASE', 'osCommerce');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

?>

[Jack_mcs]

^^ That should work, it did for me!

 

About the brief mention of SSL..

 

I bought my webhosting which advertised free SSL with it. However, (I'm using FileZilla FTP) I can only connect with the selection "FTP over TLS (Explicit Encryption)". I talked to my host and he seemed to say that was the sucure SSL connection I need. But theres another option "FTP over SSL (explicit encryption)".. but it doesn't work, gives error and can't access the server, even though it sounds more likely to be what I want!?

 

Does anyone know what I can do?

 

Can I buy an SSL certificate from somewhere else and get the host to install it for me, even though the hosting company claim to have it?

You're talkng about two different things. An ssl certificate doesn't have anything to do with sftp. That is a setting change your host makes. You should have an ssl certificate, but it won't fix this problem. If your host only allows secure ftp connections, then it should be set up to run that way already.

 

Jack

[TheCheshireCat]

Jack, can you please try to help me further? I'm pretty much stuck.

Thanks!

[Jack_mcs]

It's either a setting on your host or one of the setting in admin regarding saving files to disk. Your host is saying it is your problem. That may not be true but if they won't help, you might have a difficult time. Be sure you don't have the admin->configuration->cache directory set to a common directory. Not much more I can do via the forums. Maybe someone else has some suggestions.

 

Jack