So how about this htaccess file?

[jdog]

I posted something previously about changing the password for administration of my osc site (http://www.oscommerce.com/forums/index.php?showtopic=334026) . I don't understand what to do. Being such a fresh newbie, no one seems to want to explain this to me.

 

So I'm reading, trying to figure this out on my own. Now I discover this .htaccess file, which I can put on my server (assuming they have Apache).

 

So why not use this htaccess file, in addition to the old admin password? It supplements security, right? Doesn't it make changing the admin password a moot issue?

 

I read an article on here (in the forums, somewhere) about putting a file on your server that blocks anyone without a specific IP address. That makes both htaccess and admin passwords, and file permissions moot, doesn't it? If it doesn't, why?

 

I don't expect detailed answers (everybody here is an expert, except for me). So, if you can, just type a few words to start some sort of a sentence, I'll try to figure out the rest. That's how I'm having to do this, anyway ("learning by forum" is SOOOO slow.....)

 

--can anyone recommend a book I can use? I am reading Mercer's <i> OsCommerce: Professional Edition</i> and Mercer assumes you're a techie already, so his explanations are not basic enough for me. I need something like <i> OsCommerce For People Who Do Not Have A Degree in Computer Science</i>......

[FIMBLE]

htaccess is an over ride of the apache config for local use.

if you need this to secure your admin then you are already using an old version of this software, you should consider upgrading if you are not too far along.

Be very careful with it as it will cause you major problems!

You could start by reading the documentation that should be with the down load it has tips in there.

Regards

Nic

[BryceJr]

Go back to your previous topic, www.oscommerce.com/forums/index.php?showtopic=334026.

 

1. Post #3. Copy Robert's code and paste it in a text editor and save it as "newpass.php"

2. Upload that to the root of your server and type "mydomain.com/newpass.php"

 

3. Input your password in the box, take note of this password, and click submit.

4. Encrypted version of that password is displayed. Take note of that also. You'll need it.

 

5. Log in to your database server via PhpMyAdmin and look for your database.

6. Find the administrators table and browse through it. You will find one of the administrator name/user of your site.

 

7. One of the field for that paricular administrator name is "password". You'll see the old encrypted pasword. Under the password column of that user paste the newly encrypted password you generated in #4. This will overwrite the old encrypted pasword.

8. Click GO to save the changes.

 

Go back to your admin site and try the new password, the one you typed in the box before it got encrypted.

[Guest]

Deep Inside Oscommerce is a good book, there are others out there also.

 

http://www.webdotdev.com/nvd/books-reviews...book-215-1.html

 

Learning by forum is slow yes, but with so many minds to pick here one can learn alot.

 

I'm not the sharpest tack in the box but I get by with the help of the great people on this forum :)

[jdog]

Go back to your previous topic, www.oscommerce.com/forums/index.php?showtopic=334026.

 

1. Post #3. Copy Robert's code and paste it in a text editor and save it as "newpass.php"

2. Upload that to the root of your server and type "mydomain.com/newpass.php"

 

3. Input your password in the box, take note of this password, and click submit.

4. Encrypted version of that password is displayed. Take note of that also. You'll need it.

 

5. Log in to your database server via PhpMyAdmin and look for your database.

6. Find the administrators table and browse through it. You will find one of the administrator name/user of your site.

 

7. One of the field for that paricular administrator name is "password". You'll see the old encrypted pasword. Under the password column of that user paste the newly encrypted password you generated in #4. This will overwrite the old encrypted pasword.

8. Click GO to save the changes.

 

Go back to your admin site and try the new password, the one you typed in the box before it got encrypted.

 

Thank you for explaining it in this manner. It sounds pretty easy (I shouldn't say that, though, until I do it)....:)

[jdog]

Deep Inside Oscommerce is a good book, there are others out there also.

 

http://www.webdotdev.com/nvd/books-reviews...book-215-1.html

 

Learning by forum is slow yes, but with so many minds to pick here one can learn alot.

 

I'm not the sharpest tack in the box but I get by with the help of the great people on this forum :)

 

Thanks for the info---- I'm more of a "book" guy when I'm doing something like this, but these forums are great. The people are pretty nice, despite my stupidity..... I just wish I could ask decent questions (for example, I just discovered that my original htaccess post was inaccurate)--- I'm just kind of stumbling around in the dark; I'm told it gets better.....