shawrj Posted June 21, 2004 Posted June 21, 2004 In the install readme it says: Do the same for the 'admin' directory but rename the directory to a unique and secret name. This directory does not have to reside inside the catalog directory, though may need to be manually configured. How important is it to change the name of this directory? the tutorial I am following says secure it using .htaccess file instead. Is this sufficiant? Thanks Rob
vasttech Posted June 22, 2004 Posted June 22, 2004 Changing the name of the admin directory adds a layer of security to your site. Since the default install of oscommerce installs the admin directory, all a hacker has to know is that you are using oscommerce, and try to hack the admin directory userid and password. It is not that hard to change. Just rename the directory and edit your admin/includes/configure.php file to reflect the new name. Also, still add the .htaccess file as you will still want password protection. osCommerce Knowledge Base osCommerce Documentation Contributions
Daemonj Posted June 22, 2004 Posted June 22, 2004 Definitely change the name *and* use the .htaccess file. "Great spirits have always found violent opposition from mediocre minds. The latter cannot understand it when a man does not thoughtlessly submit to hereditary prejudices but honestly and courageously uses his intelligence." - A. Einstein
shawrj Posted June 22, 2004 Author Posted June 22, 2004 Changing the name of the admin directory adds a layer of security to your site. Since the default install of oscommerce installs the admin directory, all a hacker has to know is that you are using oscommerce, and try to hack the admin directory userid and password. It is not that hard to change. Just rename the directory and edit your admin/includes/configure.php file to reflect the new name. Also, still add the .htaccess file as you will still want password protection. When I changed the name of the Admin directory through Dreamweaver, the program indicated there were another 30?? pages or so which linked to the Admin directory. Do I need to worry about changing these links also, or will simply changing the configure.php file be good enough? And finally..can you possibly point me to a good guide to installing .htaccess?? Many Thanks for the support. Rob
shawrj Posted June 24, 2004 Author Posted June 24, 2004 Got the .htaccess sorted, but can someone tell me if I change the name of the admin directory, will changing the appropriate line in the configure.php file be sufficient, or are there numerous other pages which will also need changing to reflect the new name?
Recommended Posts
Archived
This topic is now archived and is closed to further replies.