Difference between revisions of "Security Checks"
From Phoenix Cart User Guide
PeterRobert (talk | contribs) |
PeterRobert (talk | contribs) |
||
| Line 11: | Line 11: | ||
[[File:securitychecks2.png|link=]] | [[File:securitychecks2.png|link=]] | ||
</div> | </div> | ||
| − | [[File: | + | |
| + | ---- | ||
| + | [[File:securitychecks3.png|link=]] | ||
*Add a second level of password protection to the '''youradmin''' folder/directory on the server. | *Add a second level of password protection to the '''youradmin''' folder/directory on the server. | ||
| Line 41: | Line 43: | ||
---- | ---- | ||
| − | [[File: | + | [[File:securitychecks4.png|link=]] |
*Ensure both '''configure.php''' files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties. | *Ensure both '''configure.php''' files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties. | ||
| Line 54: | Line 56: | ||
---- | ---- | ||
| − | [[File: | + | [[File:securitychecks5.png|link=]] |
*Delete this folder/directory from the server - right click and delete. | *Delete this folder/directory from the server - right click and delete. | ||
| Line 60: | Line 62: | ||
---- | ---- | ||
| − | [[File: | + | [[File:securitychecks6.png|link=]] |
*Delete this folder/directory from the server. | *Delete this folder/directory from the server. | ||
| + | |||
| + | |||
| + | ---- | ||
| + | [[File:securitychecks7.png|link=]] | ||
| + | |||
| + | *Click the message - it is linked to '''Tools → Version Checker''' | ||
Revision as of 14:10, 25 October 2019
<historylink type="back">🠈 Back</historylink> 🠉 ADMINISTRATION
From admin go to Tools → Security Checks to see this:
- This shows security messages that require attention.
- This screenshot is from a new installation that shows items requiring attention marked with:
- Add a second level of password protection to the youradmin folder/directory on the server.
- From the admin dashboard go to Configuration → Administrators to see this:
- Click Edit to see this:
- Enter a different Username: and New Password:
- Tick the Protect With htaccess/htpasswd box.
- Click Save to see this:
TIP:
- It is advisable to password protect the whole website to prevent visitors or internet search engines finding the website before it is ready - go to PASSWORD PROTECT - this can also be done on the cpanel in some host server accounts.
- Ensure both configure.php files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties.
- Important: Our server only allows a 644 setting which causes the error message to remain on admin page - providing the setting is 644 this can be ignored.
- Presuming a SSL certificate is installed:
- Edit includes/configure.php and youradmin/includes/configure.php
- The files on the host server can be edited using FTP software.
- E.g. using FileZilla - right click on the file and click View Edit in the popup menu.
- Change Line 4 in both files to
define('ENABLE_SSL', true);- save file back to the server. - Important: includes/configure.php and youradmin/includes/configure.php are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations.
- Delete this folder/directory from the server - right click and delete.
- Delete this folder/directory from the server.
- Click the message - it is linked to Tools → Version Checker
Please visit again soon for additions and changes
Phoenix Cart User Guide, like CE Phoenix Cart, is free to use but is maintained by unpaid volunteers.
All other content is the reserved Intellectual Property and Copyright of phoenixcart.org
