Securing site at the end of development

[timbeckham]

I know this has been covered somewhere, so please forgive the duplication, but I cannot find the area on the OSC site that gives instructions for the final steps in securing a site that is ready to go live. I've checked the Wiki documentation and could find nothing, and I have done searches on key words that did not yield results.

 

What I'm looking for is a step-by-step analysis of what has to be done to secure a site, including permissions on files and directories from ~/public_html/ on down, how to properly use .htaccess files, SSL certificates and any other security-related issues.

 

Any help will be greatly appreciated.

 

Tim B.

[Guest]

http://wiki.oscommerce.com/helpInstallNew will give the permissions need. if you installed yourself, you may noticed this in the install file. outiside of that, you need to password protect the admin directly. most hosts have a cpanel in which to password protct that directory.

[timbeckham]

Michael,

Thanks for the link. It appears to be what I need. I'm no whiz on security, but at least this will get me on a learning path.

Tim B.