You are here:  » Password & Security

Support Forum



Password & Security

Submitted by gadget on Tue, 2008-11-04 08:35 in

Should I be adding a password onto the 'admin' directory? Are there any other things I should be doing for security?

Submitted by support on Tue, 2008-11-04 10:31

Hi,

The easiest way to add a password to your /admin/ section is to use your hosting control panel, as these normally have an option to password protect a specific directory on your site (in your case select /shop/admin/) and then enter a username and password.

If you do not have this option, let me know and I'll send you a very simple .htaccess password protection method that you can use...

Cheers,
David.

Submitted by atman on Tue, 2008-11-04 18:12

david,

can you pls post the htacess rule you are using here? in case this is better alternative to my /admin rename folder :)

regards,

atman

Submitted by support on Tue, 2008-11-04 18:48

Hi atman,

Download password.zip

Extract the files, and edit htaccess.txt changing "password" (without the quotes) to the password you want. Then save the file as .htaccess and upload it and login.php to your /admin/ folder!

Cheers,
David.

Submitted by paddyman on Thu, 2009-04-09 22:38

Nice Mod

Cheers

Adrian

Submitted by shogounou on Wed, 2009-05-20 10:08

Hi David

Just a question.
What is the level of security of such a kind script ?

Cheers

Guillaume

Submitted by support on Wed, 2009-05-20 14:21

Hello Guillaume,

I would say that it is perfectly adequate given the "value" of the pages that it is protecting.

Apache's .htaccess mechanism is tried and tested; and any circumventions would be known about and fixed within the releases very quickly. It's more likely that a hosting account itself would be compromised to be honest...!

Cheers,
David.