1and1 VPS and securing the admin area

[Schadeboy]

Hello, everyone.

 

I hope that I can find some answers here. I've spent the better part of the last two days trying to find a solution to my questions, with no luck.

 

I recently had to switch over to a new host as my previous host only provided shared hosting services and apparently my site became too popular. We now have a 1and1.com Virtual Private Server setup. I used the Plesk control panel to install the MS2.2 version of osCommerce (which is what I had before). During the installation, it asked me for a store admin login id and password. I supplied my old credentials. However, I have no idea where it's actually storing that information.

 

I now find myself in need of adding extra users for various tasks within our osCommerce admin site. Under my old host, I was able to set up a protected directory under the control panel. But when I do that on the Plesk control panel for my VPS, it seems to have no affect. I can't log in with any of the user accounts I have created. As far as I can tell, the site does not use an htaccess file.

 

I have also tried to install the Secure Admin Login - Logout contribution, with no affect. The only way I can log is with the single login password and ID I provided during the installation. My site is working just fine at the moment, and I'd rather not have to do a manual install of osCommerce if I can avoid it. We were already down for four days while we moved hosts and got everything worked out again. It would be very painful to have to pull the site down again for a manual reinstall.

 

Any help or advice would be very much appreciated. If I need to post config files for further troubleshooting, I'm more than willing to do that.

 

Thanks!

 

P.S.

I have posted this same exact question on the ***.com forum as well in hopes of getting a quick answer back.