Admin User Management

[HDLLC]

Hi-

 

Wanting to get some kind of security in place (password, or the like) for my new install.

I'm pretty new to OSC - but looked around.

 

Wanted to see what others are doing for security on the admin portion - and what might work best, and the ins and outs. (htaccess file, permissions on admin folder, contribution, etc.)

 

Thanks in advance!

 

--Jeff

[Daemonj]

Most people use a combination of .htaccess and an admin contribution and the use of SSL.

[yort]

Most people use a combination of .htaccess and an admin contribution and the use of SSL.

 

So how do "most people do that"? I have ssl but it isnt utilized until customers access there account or the shopping cart.

 

What do you change in .htacess?

Do you make the changes to .htacces under root or the file in the admin directory?

 

Sorry Im new. :blush:

 

and dislecsic .htaccess I mean

[egattocs]

So how do "most people do that"? I have ssl but it isnt utilized until customers access there account or the shopping cart.

 

What do you change in .htacess?

Do you make the changes to .htacces under root or the file in the admin directory?

 

Sorry Im new. :blush:

 

and dislecsic .htaccess I mean

There is a good guide to .htaccess found here http://www.javascriptkit.com/howto/htaccess3.shtml

That link will take you to the part about password protection using .htaccess.

 

I hope that helps!

Scott

[Daemonj]

Most server's control panels have a File Manager or a Password Protection icon. You drill down to where you can select the admin folder and then supply a username and password.

 

You can also go to http://www.webmaster-toolkit.com/htaccess-generator.shtml and enter the username, password, and full path to the admin folder in the respective boxes. Then upload the .htaccess and .htpasswd files to your admin folder via ftp.

[HDLLC]

Most server's control panels have a File Manager or a Password Protection icon. You drill down to where you can select the admin folder and then supply a username and password.

 

You can also go to http://www.webmaster-toolkit.com/htaccess-generator.shtml and enter the username, password, and full path to the admin folder in the respective boxes. Then upload the .htaccess and .htpasswd files to your admin folder via ftp.

 

 

Thanks a ton Jim!

 

Much appreciated!

 

--Jeff

[HDLLC]

One Question-

 

I used that code, then appended the .htaccess file already in my Admin folder...

 

I added the password file it generated too.

 

Now, all it does is as for the username and password. Constantly. I never see the page - just keeps asking for the login/pw info...

 

Any ideas?

 

--Jeff

[Daemonj]

Did you enter the full path to your admin folder?

 

For example - /home/webs/user/public_html/admin

[HDLLC]

Did you enter the full path to your admin folder?

 

For example - /home/webs/user/public_html/admin

 

It's in there - just repeatedly asks for the login information...

 

I have not a clue.

 

The path is full - actually copied from my configure.php file to be certain...

 

Any ideas?

 

Thanks!

[HDLLC]

It's in there - just repeatedly asks for the login information...

 

I have not a clue.

 

The path is full - actually copied from my configure.php file to be certain...

 

Any ideas?

 

Thanks!

 

 

End user problem - (me).

 

Pulled all of it out, put it back - viola - it works!

 

Sorry - was out for a bit, back into things now.

 

Thanks again for the help!

 

--HD