sash_007, on 14 March 2010, 08:23, said:
after that when i tried to login
it says
Error: Invalid administrator login attempt.
Most likely this has to do with the fact that you get a 302 message (redirection to site without www) when going to that admin directory (name of site edited out):
curl -v http://www.yoursite.com/store/admin/
* About to connect() to www.yoursite.com port 80 (#0)
* Trying 69.167.137.119... connected
* Connected to www.yoursite.com (69.167.137.119) port 80 (#0)
> GET /store/admin/ HTTP/1.1
> User-Agent: curl/7.16.3 (powerpc-apple-darwin9.0) libcurl/7.16.3 OpenSSL/0.9.7l zlib/1.2.3
> Host: www.yoursite.com
> Accept: */*
>
< HTTP/1.1 302 Moved Temporarily
< Date: Sun, 14 Mar 2010 09:12:06 GMT
< Server: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
< X-Powered-By: PHP/5.2.11
< Expires: Thu, 19 Nov 1981 08:52:00 GMT
< Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
< Pragma: no-cache
< Set-Cookie: osCAdminID=6d0ff2fd7df1e8bd369b18d4f1608650; path=/store/admin/
< Location: http://yoursite.com/store/admin/login.php?osCAdminID=6d0ff2fd7df1e8bd369b18d4f1608650
< Content-Length: 0
< Content-Type: text/html
<
* Connection #0 to host www.yoursite.com left intact
* Closing connection #0
Note the redirect to the site without www prepended....
And of course it is a good idea to rename the admin directory to something less obvious and add .htaccess protection on top of that.