Admin Panel Exposed

[Christian_Walker]

Hello. Well, this is the problem. I've just installed the osCommerce and when I put the route to the admin panel: "http://www.mysite.com/osc/admin" this one shows up but WITHOUT asking me for an user or password, so, anybody is able to enter there.

 

Please, help me.

[Turbo]

its some time ago since i did this - one tip : search for ".htaccess" , this file has to be generated to password protect your admin file.

[Christian_Walker]

And... where is that file, fella? (I didn't see it by FTP)

 

It's the first time I've got this kind of problem, and it's very weird because the osCommerce System looks great but, come on!, I can't believe it doesn't have a proper and secure administration panel. So, tell me what I did wrong or where is the catch.

 

I'm really clueless.

[Guest]

'Tis is your catalog/admin area. Could be hidden from view though; you might need to show hidden files via your FTP client.

 

Here's a Knowledge Base article about such

 

And here's a post I wrote a little while ago about using .htaccess for security.

 

Also check out www.htaccesstools.com for assistance and tools.

[bill110]

And... where is that file, fella? (I didn't see it by FTP)

 

It's the first time I've got this kind of problem, and it's very weird because the osCommerce System looks great but, come on!, I can't believe it doesn't have a proper and secure administration panel. So, tell me what I did wrong or where is the catch.

 

I'm really clueless.

at your host you should have some kind of control panel that will let you oassword protect files.

go there and password protect the admin folder.

 

also the .htaccess folder is in the root directory.

If you are going to use this to password protect you will need something like this site to help you create the files

http://www.yellowpipe.com/yis/tools/htacce...rator/index.php

[Christian_Walker]

Thanks a lot! I will try it.

[BlackberryBuckets]

hi there,

 

I have done the .htaccess and htpsswd files. The box pops up asking for my login info...and I enter it. Then it asks again, and again, and AGAIN.

If I am trying to go to just mysite.com/catalog/admin it only asks 3 times...

if I try to go directly to the index.php page...then it is never ending.

 

Any ideas what I am doing wrong...or how to fix this??

I would really like to be able to use the osCommerce for my cart...but not if I can't password protect my admin area.

P.S. Anyway to get that added into an upgrade version??

 

Thanks in Advance,

Rhoda