3 replies to this topic

[vampirehunter]

im going to install a fresh version of 2.3.1 to build a shop, can anyone advise the list of security add ons and things to do?

please make a list of the things required to make the shop secure and safe as possible

thanks

[DunWeb]

@vampirehunter

There are NO known vulnerabilities in v2.3.1, however you can add some additional monitoring / security contributions to enhance the current security.

Some of which may be:

1) Site Monitor
2) Security Pro
3) Osc_Sec
4) IP Trap
5) HTaccess Protection




Chris

[Praful Kamble]

@vampirehunter


To secure your site would like to suggest few basic Precautions:

1.  All .php and .js files should have 444 permission.
2.  All folders should have 555 permission.
3.  Admin folder should be renamed.
4.  Add captcha to create account, contact us, reviews and any other forms on site.
5. Make admin .htaccess protected.
6. Delete the public_html/oscommerce/catalog/install directory


Praful

[kenkja]

Take a look at

http://forums.oscommerce.com/topic/313323-how-to-secure-your-oscommerce-22-site/page__st__560

just over half way down on the page there's post #575 by Juto, very cool and easy to install

Ken