No Admin Security

[pony88]

Hi everyone,

 

Thank god for this forum! I am new to oscommerce and have just installed it on my site. It seems to work (mostly) but when I go to mysite.com/admin I am not asked for a username/password. It's not cookies on my computer etc as other people can login aswell, so basically anybody with the internet can admin my site. :'(

 

Does anybody know a reason for this? I should mention that I bought a skin from templatemonster and have installed it (I just copied and pasted a bunch of files). Could this have caused the problem? I didn't check it worked before installing the skin.

 

As a side note I also get this error on some category pages, but my main concern at the moment is the admin area:

1054 - Unknown column 'p.products_sort_order' in 'order clause'

select p.products_image, pd.products_name, p.products_quantity, p.products_id, p.manufacturers_id, p.products_price, p.products_tax_class_id, IF(s.status, s.specials_new_products_price, NULL) as specials_new_products_price, IF(s.status, s.specials_new_products_price, p.products_price) as final_price from ((products_description pd, products p) left join manufacturers m on p.manufacturers_id = m.manufacturers_id, products_to_categories p2c) left join specials s on p.products_id = s.products_id where p.products_status = '1' and p.products_id = p2c.products_id and pd.products_id = p2c.products_id and pd.language_id = '1' and p2c.categories_id = '58' order by p.products_sort_order asc, pd.products_name limit 0, 20

[TEP STOP]

 

Thanks in advance, any help is much much appreciated as I'm totally stumped.

 

Tom.

[crash3903]

osc does not come with any admin security - the easiest way is to secure the admin folder through your hosting control panel

[pony88]

Thanks crash, but I have no hosting control panel, just FTP. Is there a way to make the folder password protected using FTP or is there another way of securing admin?