PDA

View Full Version : protecting osCommerce Admin


jpulliam
11-15-04, 01:11 AM
ok I know this may seem to be a silly Question.
But why and I mean WHY would someone make up a Program such as osCommerce, and not make the Admin area password Protected?

I have now spent the last three hours trying to get it password protected. Hoever i as of so far have had no luck what so ever. I have got the window coming up asking for password. but it will not take my password.

I have found and followed the instructions listed in this forum for adding on htaccess and htpasswd. how ever i also find that the instruction are a tad vague.

i also use a program called locked-tite to protect a members area i am building.

the htaccess file and the htpasswd files made with locked-tite looks completely different then what the tutorials on this forum instruct.

i do not know if the two is causing a problem. i have seen sections talking about directory bypass.but really never understood what was the proper steps to kick the by pass into effect.

I don't know.

I like the way osCommerce looks, it seems to be a pretty strong program. Howver i really do not understand why someone would take the time to build everything they did, and not make the admin area secured.

waldonomad
11-15-04, 01:20 AM
Amen!

Jade Dragon
11-15-04, 04:15 AM
The thing with apache commands is that there are many different configurations of apache. What works on one server may need tweaking on another.

The tutorial at Powweb does work on our servers.
http://help.powweb.com/tutorials/htaccess/passprotect.php

also for a tip: try to re-encrypt your password again.

=)
Jade

waldonomad
11-15-04, 04:59 AM
"Re-encrypt your password again"? How does that work?

Thanks!

Jade Dragon
11-15-04, 06:10 AM
just go back to the form and click encrypt a couple times. You'll see the encrypt change. I have found everyonce in a while that the first encrypt of the password doesn't always work. *shrug* don't know why.

http://help.powweb.com/cgi-bin/crypt.cgi

=)
Jade