Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Can't rename admin folder when trying to secure oscommerce


g_p_java

Recommended Posts

Posted

Hi,

 

i have oscommerce v2.3.1.

 

I'm trying to rename the admin folder but it doesn't work for me.

 

 

Important note:

I have installed two versions of oscommerce.

The following steps worked in version v2.2 RC2a

but not working in v2.3.1 which is my current version.

 

 

In file /catalog/admin/includes/configure.php :

i replaced the lines

 

define('DIR_WS_admin', '/store/catalog/admin/');
define('DIR_FS_admin', 'C:/Program Files/Apache/htdocs/store/catalog/admin/');

 

with

 

define('DIR_WS_admin', '/store/catalog/newAdminName/');
define('DIR_FS_admin', 'C:/Program Files/Apache/htdocs/store/catalog/NewAdminName/');

 

Then i renamed the admin folder and i gave to it the new name.

 

When i type in the browser the following command:

 

http://localhost/store/catalog/NewAdminName/index.php or login.php

 

the url becomes:

 

http://localhostdir_ws_adminlogin.php/?osCAdminID=ca321389..etc

 

Why does that happen in v2.3.1?

 

Thanks, in advance!

Posted

Try making the defines ALL_UPPER_CASE like this:

 

define('DIR_WS_ADMIN', '/store/catalog/newAdminName/');
define('DIR_FS_ADMIN', 'C:/Program Files/Apache/htdocs/store/catalog/NewAdminName/');

If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you.

 

"Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice."

- Me -

 

"Headers already sent" - The definitive help

 

"Cannot redeclare ..." - How to find/fix it

 

SSL Implementation Help

 

Like this post? "Like" it again over there >

Posted

thank you very much for replying!

my problem was fixed!

 

I would like to ask something else as well.

In order to secure the website, shall i remove the following files from admin folder?

  • sec_dir_permissions.php
  • catalog/admin/define_language.php

 

thanks, in advance

Posted

As far as I know, none of the file are considered to be a threat post-installation except the install folder and it's contents.

If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you.

 

"Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice."

- Me -

 

"Headers already sent" - The definitive help

 

"Cannot redeclare ..." - How to find/fix it

 

SSL Implementation Help

 

Like this post? "Like" it again over there >

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...