Difference between revisions of "How to Secure"
PeterRobert (talk | contribs) |
PeterRobert (talk | contribs) |
||
| Line 6: | Line 6: | ||
Warnings as shown below are given as reminders both on the admin dashboard and on the Security Checks page - from admin dashboard go to '''''Tools → Security Checks'''''. | Warnings as shown below are given as reminders both on the admin dashboard and on the Security Checks page - from admin dashboard go to '''''Tools → Security Checks'''''. | ||
| − | [[File:securewarnings1.png| | + | [[File:securewarnings1.png|link=]] |
Add a second level of password protection to the '''''youradmin''''' folder/directory on the server. | Add a second level of password protection to the '''''youradmin''''' folder/directory on the server. | ||
| Line 12: | Line 12: | ||
From the admin dashboard go to '''Configuration → Administrators''' to see this: | From the admin dashboard go to '''Configuration → Administrators''' to see this: | ||
<div class="mainpage_box"> | <div class="mainpage_box"> | ||
| − | [[File:administrators1.png|1500px]] | + | [[File:administrators1.png|link=|1500px]] |
</div> | </div> | ||
*Click <span class="btn-blue">Edit</span> to see this: | *Click <span class="btn-blue">Edit</span> to see this: | ||
<div class="mainpage_box"> | <div class="mainpage_box"> | ||
| − | [[File:administrators3.png|1500px]] | + | [[File:administrators3.png|link=|1500px]] |
</div> | </div> | ||
*Enter a different '''Username:''' and '''New Password:''' | *Enter a different '''Username:''' and '''New Password:''' | ||
| Line 22: | Line 22: | ||
*Click <span class="btn-blue">Save</span> to see this: | *Click <span class="btn-blue">Save</span> to see this: | ||
<div class="mainpage_box"> | <div class="mainpage_box"> | ||
| − | [[File:administrators2.png|1500px]] | + | [[File:administrators2.png|link=|1500px]] |
</div> | </div> | ||
<div class="mainpage_box"> | <div class="mainpage_box"> | ||
| Line 28: | Line 28: | ||
*It is advisable to password protect the whole website to prevent visitors or internet search engines finding the website before it is ready - go to <BIG>[[How to Create a Test Shop#password protect|'''PASSWORD PROTECT''']]</BIG> - this can also be done on the cpanel in some host server accounts. | *It is advisable to password protect the whole website to prevent visitors or internet search engines finding the website before it is ready - go to <BIG>[[How to Create a Test Shop#password protect|'''PASSWORD PROTECT''']]</BIG> - this can also be done on the cpanel in some host server accounts. | ||
</div> | </div> | ||
| − | [[File:securewarnings2.png| | + | [[File:securewarnings2.png|link=]] |
Ensure both '''''configure.php''''' files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties. | Ensure both '''''configure.php''''' files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties. | ||
| Line 40: | Line 40: | ||
Important: '''''includes/configure.php''''' and '''''youradmin/includes/configure.php''''' are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations. | Important: '''''includes/configure.php''''' and '''''youradmin/includes/configure.php''''' are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations. | ||
| − | [[File:securewarnings3.png| | + | [[File:securewarnings3.png|link=]] |
Delete this folder/directory from the server - right click and delete. | Delete this folder/directory from the server - right click and delete. | ||
| − | [[File:securewarnings4.png| | + | [[File:securewarnings4.png|link=]] |
Delete this folder/directory from the server. | Delete this folder/directory from the server. | ||
Revision as of 16:36, 20 October 2019
<historylink type="back">🠈 Back</historylink> 🠉 SET UP SHOP
Secure the Website
Warnings as shown below are given as reminders both on the admin dashboard and on the Security Checks page - from admin dashboard go to Tools → Security Checks.
Add a second level of password protection to the youradmin folder/directory on the server.
From the admin dashboard go to Configuration → Administrators to see this:
- Click Edit to see this:
- Enter a different Username: and New Password:
- Tick the Protect With htaccess/htpasswd box.
- Click Save to see this:
TIP:
- It is advisable to password protect the whole website to prevent visitors or internet search engines finding the website before it is ready - go to PASSWORD PROTECT - this can also be done on the cpanel in some host server accounts.
Ensure both configure.php files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties.
Important: Our server only allows a 644 setting which causes the error message to remain on admin page - providing the setting is 644 this can be ignored.
Presuming a SSL certificate is installed - edit both includes/configure.php and youradmin/includes/configure.php on the server
In FTP software - edit file - change line 4 to define('ENABLE_SSL', true); - save file back to the server.
Important: includes/configure.php and youradmin/includes/configure.php are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations.
Delete this folder/directory from the server - right click and delete.
Delete this folder/directory from the server.
The README text file is no longer required.
Delete this file from the server.
NOTE: If the Install page is still shows instead of your shop, ensure Install folder/directory has been deleted from the server, ensure your browser cache is cleared - note some servers also have a cache so if still showing contact your host server to request they clear your server cache.
TIP:
- To bypass your browser's cache:
- Firefox / Safari: Hold Shift while clicking Reload, or press either Ctrl-F5 or Ctrl-R (⌘-R on a Mac)
- Google Chrome: Press Ctrl-Shift-R (⌘-Shift-R on a Mac)
- Internet Explorer: Hold Ctrl while clicking Refresh, or press Ctrl-F5
- Opera: Go to Menu → Settings (Opera → Preferences on a Mac) and then to Privacy & security → Clear browsing data → Cached images and files.
Phoenix Cart User Guide, like CE Phoenix Cart, is free to use but is maintained by unpaid volunteers.
All other content is the reserved Intellectual Property and Copyright of phoenixcart.org
