Plugin-Order Management Security

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Securing the order management is pretty simple. What you'll need to do is first setup your username and password using the "sneek in" feature. Then get rid of the createadmin.asp page by checking the box on the login page.

You can also make sure that your order management is re-directed to the HTTPS mode. You do this by editing the META re-direct in default.htm. Make sure that you enter the full SSL path in there.

One final step is to actually remove the IUSR from this Online directory so that you receive a password challenege anytime you try to access the directory. 

Out of the box the plug-in requires that you enter the username and password to view any of the pages.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Techno Geek Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Evil monkey living in my closet! Joined: March/11/04 Location: United States Status: Offline Points: 1206	Post Options Post Reply Quote Techno Geek Report Post Thanks(0) Quote Reply Topic: Plugin-Order Management Security Posted: December/15/04 at 8:48am
	Securing the order management is pretty simple. What you'll need to do is first setup your username and password using the "sneek in" feature. Then get rid of the createadmin.asp page by checking the box on the login page. You can also make sure that your order management is re-directed to the HTTPS mode. You do this by editing the META re-direct in default.htm. Make sure that you enter the full SSL path in there. One final step is to actually remove the IUSR from this Online directory so that you receive a password challenege anytime you try to access the directory. Out of the box the plug-in requires that you enter the username and password to view any of the pages.
	Techno Geek Customer Support Engineer ComCity and SalesCart Technical Support

cberish Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: July/20/04 Location: United States Status: Offline Points: 20	Post Options Post Reply Quote cberish Report Post Thanks(0) Quote Reply Posted: December/15/04 at 7:23am
	Out of the Box: Is the Order Management Plugin secure? Looking thru the manual, it has a user name and password login. However, what keeps an outside user from viewing the orders (when an authorized user is checking orders)? Does the inherant ASP to database connection do that? Or do you have to set up the ORder Management plug to use a SSL connection? Thanks, Clay