Unsecure admin

[Noodles]

Is it just me or is the admin section unsecure by default? I am able to access it without entering a username/password

 

Can someone tell me how I can go about securing this?

 

Thanks

[ronlonnborg]

If your using windows it's gonna take a lot of crying, yellin', and possibly going through a mouse or two. :)

[strced]

Use .htaccess to restrict access to the admin directory. If you need ifo on .htaccess see http://www.clockwatchers.com/htaccess_intro.html .

 

Cheers

[rockstar]

strced,

 

how good is this .htaccess tool? is it as good as actually securing the admin folder with ssl? I just installed osc on a server and am considering trying to secure the admin folder with ssl. My server does offer a tool to password protect different directories (probably using .htaccess) and this is working fine, but i just wanted to know if it was really secure or if i should try and configure the admin folder to be ssl enabled. thanks,

rockstar

[Noodles]

It's ok, I'm using linux :)

 

I thought osCommerce would have had some system in place.

 

I'll give .htaccess a go, ta