24 replies to this topic

[matrix2223]

After you get done changing the admin folders name I recommend using this in your .htaccess file. Unless someone knows your ip and clones it, or some other hacking method. It wont let anyone in but the one who holds the correct ip, you presumably.

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName "Access Control"
AuthType Basic
order deny,allow
deny from all
# IP address of my home computer
allow from 00.000.000.000
# IP addresses of my two work computers
# allow from 00.000.000.000
# allow from 000.000.00.000
# IP address at my uncle's house
# allow from 000.000.0.00

More can be found on this thread Installing admin in a Subdomain

[KomplikatedOne]

ive followed these instructions step by step, also ammending the htaccess file
but now my left hand admin menu has gone to S**t
the java menu is no longer working and the text is hanging off the left hand side of the browser window?

[see attached]

any ideas why its done this?

cheers

Attached Files

•  screen4.jpg   244.4K   5 downloads

[KomplikatedOne]

hmm not only the left hand menu thats gone screwy, buw appears most of the buttons in the admin section have reverted to text?
still no nearer working out why

Edited by KomplikatedOne, 07 September 2011, 14:45.

[KomplikatedOne]

ok ignore the above, turned out to be a totally different issue [img]http://forums.oscommerce.com//public/style_emoticons/default/blush.png[/img]
someone had removed a jquery file used by the redmond theme

i would remove the above if i could, but i cant

[jaspervdz]

SirHarryFlashman, on 17 July 2008, 14:51, said:

Actually, in addition to moving your live admin folder, you should leave a "honeypot" admin folder as well. A nice little .htaccess for the wanna-be hackers:

AuthUserFile /xxxxx/xxxxx/xxxxx/html/catalog/admin/.htpasswd AuthGroupFile /dev/null AuthName "Username:" AuthType Basic  require valid-user 

Of course your .htpasswd looks like this:

.

(yes, an empty .htpasswd file) And just to make things more interesting, an empty index.htm will complete the "honeypot" Have fun!!

Sir Harry Flashman,
That sounds like a neat trick - can you please tell me how to do this - bit confused on where to insert the code. Running OSC version 2.3 and already renamed the admin folder and works great - just looking for sum extra security and throwing off anyone trying to hack my site..
Many thanks!
Jasper~