Securing osCommerce Through htaccess/htpasswd
In this tutorial we will show you how to protect your osCommerce website using the htaccess / htpasswd means. After installing osCommerce, you may see a message stating "This osCommerce Online Merchant Administration Tool installation is not additionally secured through htaccess/htpasswd means," which can be corrected in the Admin panel of osCommerce.
This htaccess/htpasswd protection creates an additional layer of security that can help stop people from attempting to access the Admin portion of your osCommerce eshop. This is because they would have to get through this first layer of password protection before they could even attempt to access your osCommerce Admin panel.
How to Secure Your osCommerce with htaccess Password Protection:
- Login to the Admin Panel for osCommerce.
- Click the Configuration option in the navigation menu, then select Administrators.
- You will see the Administators listed, select the first one on the list, then you will see a menu appear to the right.
After making your selections, click the Save button. You will see a notification stating "This osCommerce Online Merchant Administration Tool installation is additionally secured through htaccess/htpasswd means."Option Description Username This will list the name of the Administrator. New Password Enter a password in this field, be sure to write this password down, as it will be required for logging in after you save this setting. Protect With htaccess/htpasswd Check this box to enable htaccess protection. 
Now when you attempt to access your Admin area, you will be prompted for a username and password, before you get to the Admin login page. So you will have to enter your username and password twice, once to get to the osCommerce Admin page, and again to login to osCommerce.
Congratulations, your osCommerce website is now protected using the htaccess / htpasswd method.
Did you find this article helpful?
Tweet
Category
osCommerce Installation and Login
Comments
n/a Points
|
2016-01-03 4:59 pm
Hi! It seems strange... I have a MAMP server in my Mac and installed osCommerce 2.3.4 here. I tried the method above and it worked perfectly. I then installed the same version of osCommerce in the host web server, but the checkbox requiring .htaccess protection does NOT appear when I try to edit my admin account or create a new admin. I then tried a .htaccess file I found in the internet, created an empty .htpsswd file and checked the .htpsswd path int the .htaccess file. When accessing the admin site, I get the prompt, the admin name and pwd fields, I fill them correctly, but cannot login. Any suggestions?
Thanks,
Carlos |
Staff 1,348 Points
|
2016-01-04 6:56 pm
I regret to hear you're having trouble .htaccess password authentication. Since you're using a MAMP service you may be well-advised to check the Apache modules you have loaded or enabled. You can check these in your httpd.conf file.
Also, you can check your directory structure. Make sure the .htaccess file you're editing is affecting the correct directory and there are no other nested .htaccess files that can be interfering with your installation. Likewise, you can check ownership the files/folders. If you created any files or folders as "root" user they may not function properly in your browser. You can always try resetting the password too, just in case. |
Help Center Login
osCommerce Installation and Login
| 1. | Installing osCommerce Using Softaculous |
| 2. | How to Manually Install osCommerce |
| 3. | Securing osCommerce Through htaccess/htpasswd |
| 4. | Logging into the osCommerce Admin Panel |
Related Questions
Here are a few questions related to this article that our customers have asked:
Ooops! It looks like there are no questions about this page.
Would you like to ask a question about this page? If so, click the button below!
We value your feedback!
There is a step or detail missing from the instructions.
The information is incorrect or out-of-date.
It does not resolve the question/problem I have.
new! - Enter your name and email address above and we will post your feedback in the comments on this page!