Security Checks
From Phoenix Cart User Guide
Back
Administration
From admin go to 
Tools → Security Checks to see this:
- This shows security messages that require attention.
- This screenshot is from a new installation that shows items requiring attention.
- Admin HTTP Authentication
- Add a second level of password protection to the youradmin folder/directory on the server.
- From the admin dashboard go to Configuration → Administrators to see this:
- Click Edit to see this:
- Enter a different Username: and New Password:
- Tick the Protect With htaccess/htpasswd box.
- Click Save to see this:
TIP:
- It is advisable to password protect the whole website to prevent visitors or internet search engines finding the website before it is ready - go to PASSWORD PROTECT - this can also be done on the cpanel in some host server accounts.
- config_file_catalog
- Ensure both configure.php files have their file permissions set so only owner can read and write - set file permissions to 644 or 444 dependent on server host. This can be done in your server account control panel or using FTP software e.g. using WinSCP select file, click properties.
- Important: Our server only allows a 644 setting which causes the error message to remain on admin page - providing the setting is 644 this can be ignored.
- Presuming a SSL certificate is installed:
- Edit includes/configure.php and youradmin/includes/configure.php
- The files on the host server can be edited using FTP software.
- E.g. using FileZilla - right click on the file and click View Edit in the popup menu.
- Change Line 4 in both files to
define('ENABLE_SSL', true);- save file back to the server. - Important: includes/configure.php and youradmin/includes/configure.php are different files in different locations, never open both at once to avoid confusion and ensure they are transferred to the correct locations.
- Github Directory
- Delete this folder/directory from the server - right click and delete.
- install_directory
- Delete this folder/directory from the server.
- Version Check
- Click the message - it is linked to Tools → Version Checker
Please visit again soon for additions and changes
Phoenix Cart User Guide, like CE Phoenix Cart, is free to use but is maintained by unpaid volunteers.
All other content is the reserved Intellectual Property and Copyright of phoenixcart.org
