How to set Admin User and Pass

[ricland]

Everything went fine with the install, except I don't know where I set my admin user and password.

 

ric

[bluepony]

OSC does not come with password protection. This is something you need to do on your server.

 

Either use your web host's cpanel or use .htaccess. There are also Admin contributions available.

[ricland]

OSC does not come with password protection. This is something you need to do on your server.

 

Either use your web host's cpanel or use .htaccess. There are also Admin contributions available.

 

 

Not quite sure how to apply what you're saying.

 

 

ric

[bluepony]

Check with your web hosting company to see if they give you access to a control panel. Using it you can password protect your Admin folder.

 

If they do not, and you are running on a Unix/Linux server you can use .htaccess to password protect your Admin folder. There are many tutorials on the web on how to set this up.

 

If neither of those options are available, you can install a contribution to your OSCommerce files.

[DorianJ]

There are many tutorials on the web on how to set this up.

Would you mind sharing a good one with us? I've searched and read many tutorials and they all have different instructions for (supposedly) accomplishing the same thing, yet they all fail to explain how they work. I've had no success with all of them... not even a password prompt :angry:

[Guest]

Some quick results from google on keywords HOWTO + htaccess:

 

http://www.javascriptkit.com/howto/htaccess.shtml

http://httpd.apache.org/docs/howto/htaccess.html

http://www.cs.wisc.edu/csl/doc/howto/htaccess/

 

Hope that will get you further

 

Richard

 

:rolleyes:

[DorianJ]

Unfortunately, these were all some of the sites I had looked at and I still can't get anything to work. Can somebody look at my .htaccess file and tell me what's wrong with it? This is the file that's included with osCommerce, and I added the tutorial stuff to the end of it.

 

# $Id: .htaccess,v 1.1 2003/06/20 00:18:30 hpdl Exp $
#
# This is used with Apache WebServers
#
# For this to work, you must include the parameter 'Options' to
# the AllowOverride configuration
#
# Example:
#
# <Directory "/usr/local/apache/htdocs">
#   AllowOverride Options
# </Directory>
#
# 'All' with also work. (This configuration is in the
# apache/conf/httpd.conf file)

# The following makes adjustments to the SSL protocol for Internet
# Explorer browsers

<IfModule mod_setenvif.c>
 <IfDefine SSL>
   SetEnvIf User-Agent ".*MSIE.*" \
            nokeepalive ssl-unclean-shutdown \
            downgrade-1.0 force-response-1.0
 </IfDefine>
</IfModule>

# Fix certain PHP values

#<IfModule mod_php4.c>
#  php_value session.use_trans_sid 0
#  php_value register_globals 1
#</IfModule>

AuthUserFile /Users/dorianj/Sites/.htpasswd
AuthGroupFile /dev/null
AuthName EnterPassword
AuthType Basic

require user dorianj

[Guest]

I'm having the same problems... I run on iis 6 and so i cant use .htaccess and my control panel for my host doesnt have those options either....

 

Any ideas?

[BYGino]

Yeh, me too, been banging my head against a brick wall for about a week on this. I think it may be server related, is that possible? I've used .htacces before with my own personal web site without any problems, now I've set-up OSC for a friend, I can't password protect the admin section at all. Anyone?!?!? :(

[bluepony]

Syntax should be:

 

AuthUserFile /Users/dorianj/Sites/.htpasswd
AuthGroupFile /dev/null
AuthName "EnterPassword"
AuthType Basic

<Limit GET POST>
require user dorianj
</Limit>

[DorianJ]

Still does not work.

 

How difficult can this possibly be? Every website tutorial I've read makes it sound like 1-2-3-done! I've put the .htaccess file at the root level of the directory I want to protect. Shouldn't that be enough? Do I have to modify httpd.conf? Do I have to change permissions for .htaccess? Why won't this work?

 

I've been at this for three days now so pardon my frustrations :angry:

[Lavarock]

Not all websites allow you to set passwords...

[DorianJ]

Can you elaborate on that? This is the .htaccess file we're dealing with here and one of its many facets is the ability to password protect a directory, so I don't understand how that could vary among websites running on Apache. Please explain.

[AlanR]

You're running on MacOS on a cable modem. You should have total control over that machine. Google and read up on .htaccess

[BYGino]

Got mine to work eventually by putting the password file into the web root directory, don't know if you've tried this yet. I can't fathom why it didn't work before moving it.

[DorianJ]

I've tried that too. I've moved the htpasswd file to many directories and still didn't work.

[Guest]

I too have tryed all of the suggested configurations. I am running Rh 9.

I am wondering if their is a conflict with a LoadModule directive. By default apache is installed with the following:

 

LoadModule access_module modules/mod_access.so

LoadModule auth_module modules/mod_auth.so

LoadModule auth_anon_module modules/mod_auth_anon.so

LoadModule auth_dbm_module modules/mod_auth_dbm.so

LoadModule auth_digest_module modules/mod_auth_digest.so

LoadModule include_module modules/mod_include.so

LoadModule log_config_module modules/mod_log_config.so

LoadModule env_module modules/mod_env.so

LoadModule mime_magic_module modules/mod_mime_magic.so

LoadModule cern_meta_module modules/mod_cern_meta.so

LoadModule expires_module modules/mod_expires.so

LoadModule headers_module modules/mod_headers.so

LoadModule usertrack_module modules/mod_usertrack.so

LoadModule unique_id_module modules/mod_unique_id.so

LoadModule setenvif_module modules/mod_setenvif.so

LoadModule mime_module modules/mod_mime.so

LoadModule dav_module modules/mod_dav.so

LoadModule status_module modules/mod_status.so

LoadModule autoindex_module modules/mod_autoindex.so

LoadModule asis_module modules/mod_asis.so

LoadModule info_module modules/mod_info.so

LoadModule dav_fs_module modules/mod_dav_fs.so

LoadModule vhost_alias_module modules/mod_vhost_alias.so

LoadModule negotiation_module modules/mod_negotiation.so

LoadModule dir_module modules/mod_dir.so

LoadModule imap_module modules/mod_imap.so

LoadModule actions_module modules/mod_actions.so

LoadModule speling_module modules/mod_speling.so

LoadModule userdir_module modules/mod_userdir.so

LoadModule alias_module modules/mod_alias.so

LoadModule rewrite_module modules/mod_rewrite.so

LoadModule proxy_module modules/mod_proxy.so

LoadModule proxy_ftp_module modules/mod_proxy_ftp.so

LoadModule proxy_http_module modules/mod_proxy_http.so

LoadModule proxy_connect_module modules/mod_proxy_connect.so

 

 

Do I need all of the auth* Loadmodules ??

Should I coment out any ??

 

thanks

[DorianJ]

Anyone got some other ideas. I've spent the better part of this weekend working on this nonsense problem and made zero progress. Every piece of Googled information has been useless