Securing the admin panel

[elementskater255]

Sorry if i sound stupid or something, im new at oscommerce. I just need to know how to make the admin panel secure. I run apache, on windows xp professional. I host my own stuff if that makes anything easier.

 

Please help! Thanks!

[ranxero]

hi, you might use .htaccess files.

 

########### .htaccess file contents ################

<IfModule mod_setenvif.c>

<IfDefine SSL>

SetEnvIf User-Agent ".*MSIE.*" \

nokeepalive ssl-unclean-shutdown \

downgrade-1.0 force-response-1.0

</IfDefine>

</IfModule>

 

 

DirectoryIndex default.php index.php index.htm index.html

AuthUserFile "c:/somewhere/dir/Apache/htdocs/.htpasswd"

AuthType Basic

AuthName "Admin"

 

require valid-user

Options Indexes FollowSymlinks MultiViews

 

########### .htaccess eof ################

 

with absolute path to .htpasswd (AuthUserFile)

you can generate the .htpasswd file with the apache tool, don't remember the name of the binary, look in apache/bin

 

you can put the .htaccess file into oshome/admin and the browser will pop up a login dialog.

other possibility is to secure it with SSL but that's already been answered.

just putting up a php login won't do much unless you use SSL

 

hth

[elementskater255]

lol sorry, but as i said, im a newbie. I really dont know how to do this.

 

1. I opened the .htpasswd file and a black command prompt came up really fast, and left before i could read it.

[1quicksi]

Or search the contributions and yee shall find ;)

 

http://www.oscommerce.com/community/contri...tegory,3/page,2

[dubie]

I used http://www.oscommerce.com/community/contributions,1/page,2 and it works perfect!!