Difference between revisions of "How to Secure"
PeterRobert (talk | contribs) |
PeterRobert (talk | contribs) |
||
| Line 1: | Line 1: | ||
| − | <span style="color:#0088dd;" | + | <span class="btn-grey" style="color:#0088dd;">'''« [[SET UP SHOP]]'''</span> |
| − | <historylink type="back" /> | + | <span class="btn-grey"><historylink type="back" /></span> |
| + | <hr> | ||
| + | <BIG>'''Secure the Website'''</BIG> | ||
| − | + | Warnings as shown below are given as reminders both on the admin dashboard and on the Security Checks page - from admin dashboard go to '''''Tools => Security Checks'''''. | |
| − | |||
| − | Warnings as shown below are given as reminders both on the admin dashboard and on the Security Checks page - from admin dashboard go to Tools => Security Checks. | ||
[[File:securewarnings1.png]] | [[File:securewarnings1.png]] | ||
| − | Add a second level of password protection to the | + | Add a second level of password protection to the '''''youradmin''''' folder/directory on the server. |
From the admin dashboard go to Configuration => Administrators, click Edit, tick the Protect With htaccess/htpasswd box then click Save. | From the admin dashboard go to Configuration => Administrators, click Edit, tick the Protect With htaccess/htpasswd box then click Save. | ||
| Line 17: | Line 17: | ||
[[File:securewarnings2.png]] | [[File:securewarnings2.png]] | ||
| − | Ensure both configure.php files have their file permissions set so only owner can read and write - right click on file and set File permissions to 644 or 444 dependent on server host. | + | Ensure both '''''configure.php''''' files have their file permissions set so only owner can read and write - right click on file and set File permissions to 644 or 444 dependent on server host. |
Important: Our server only allows a 644 setting which causes the error message to remain on admin page - providing the setting is 644 this can be ignored. | Important: Our server only allows a 644 setting which causes the error message to remain on admin page - providing the setting is 644 this can be ignored. | ||
| − | Presuming a SSL certificate is installed - edit both includes/configure.php and youradmin/includes/configure.php on the server | + | Presuming a SSL certificate is installed - edit both '''''includes/configure.php''''' and '''''youradmin/includes/configure.php''''' on the server |
| − | In Filezilla - right click file - click View/Edit - change line 4 to define('ENABLE_SSL', true); - save and then back to Filezilla and click Yes to upload the file back to the server. | + | In Filezilla - right click file - click '''''View/Edit''''' - change line 4 to <code>define('ENABLE_SSL', true);</code> - save and then back to Filezilla and click '''''Yes''''' to upload the file back to the server. |
| − | Important: includes/configure.php and youradmin/includes/configure.php are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations. | + | Important: '''''includes/configure.php''''' and '''''youradmin/includes/configure.php''''' are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations. |
[[File:securewarnings3.png]] | [[File:securewarnings3.png]] | ||
| Line 35: | Line 35: | ||
Delete this folder/directory from the server - right click and delete. | Delete this folder/directory from the server - right click and delete. | ||
| − | The README text file is no longer required. | + | The '''''README''''' text file is no longer required. |
Delete this file from the server - right click and delete. | Delete this file from the server - right click and delete. | ||
| − | NOTE: If the Install page is still shows instead of your shop, ensure Install folder/directory has been deleted, ensure your browser cache is cleared - note some servers also have a cache so if still showing contact your host server to request they clear your server cache. | + | NOTE: If the Install page is still shows instead of your shop, ensure '''''Install''''' folder/directory has been deleted, ensure your browser cache is cleared - note some servers also have a cache so if still showing contact your host server to request they clear your server cache. |
<br>To bypass your browser's cache: | <br>To bypass your browser's cache: | ||
*Firefox / Safari: Hold Shift while clicking Reload, or press either Ctrl-F5 or Ctrl-R (⌘-R on a Mac) | *Firefox / Safari: Hold Shift while clicking Reload, or press either Ctrl-F5 or Ctrl-R (⌘-R on a Mac) | ||
| Line 46: | Line 46: | ||
*Internet Explorer: Hold Ctrl while clicking Refresh, or press Ctrl-F5 | *Internet Explorer: Hold Ctrl while clicking Refresh, or press Ctrl-F5 | ||
*Opera: Go to Menu → Settings (Opera → Preferences on a Mac) and then to Privacy & security → Clear browsing data → Cached images and files. | *Opera: Go to Menu → Settings (Opera → Preferences on a Mac) and then to Privacy & security → Clear browsing data → Cached images and files. | ||
| − | < | + | <hr> |
| + | <span class="btn-grey">[[How_to_Back_Up|Go to Next Stage »]]</span> | ||
| + | |||
| + | <span class="btn-grey"><historylink type="back" /></span> | ||
Revision as of 13:40, 5 October 2019
<historylink type="back" />
Secure the Website
Warnings as shown below are given as reminders both on the admin dashboard and on the Security Checks page - from admin dashboard go to Tools => Security Checks.
Add a second level of password protection to the youradmin folder/directory on the server.
From the admin dashboard go to Configuration => Administrators, click Edit, tick the Protect With htaccess/htpasswd box then click Save.
Tip: Password protection can also be added in a similar way to the whole website to prevent visitors or internet search engines finding the website before it is ready - read How to Create a Test Shop#password protect - this can also be done on the cpanel in some host server accounts.
Ensure both configure.php files have their file permissions set so only owner can read and write - right click on file and set File permissions to 644 or 444 dependent on server host.
Important: Our server only allows a 644 setting which causes the error message to remain on admin page - providing the setting is 644 this can be ignored.
Presuming a SSL certificate is installed - edit both includes/configure.php and youradmin/includes/configure.php on the server
In Filezilla - right click file - click View/Edit - change line 4 to define('ENABLE_SSL', true); - save and then back to Filezilla and click Yes to upload the file back to the server.
Important: includes/configure.php and youradmin/includes/configure.php are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations.
Delete this folder/directory from the server - right click and delete.
Delete this folder/directory from the server - right click and delete.
The README text file is no longer required.
Delete this file from the server - right click and delete.
NOTE: If the Install page is still shows instead of your shop, ensure Install folder/directory has been deleted, ensure your browser cache is cleared - note some servers also have a cache so if still showing contact your host server to request they clear your server cache.
To bypass your browser's cache:
- Firefox / Safari: Hold Shift while clicking Reload, or press either Ctrl-F5 or Ctrl-R (⌘-R on a Mac)
- Google Chrome: Press Ctrl-Shift-R (⌘-Shift-R on a Mac)
- Internet Explorer: Hold Ctrl while clicking Refresh, or press Ctrl-F5
- Opera: Go to Menu → Settings (Opera → Preferences on a Mac) and then to Privacy & security → Clear browsing data → Cached images and files.
<historylink type="back" />
