Plugin-Order Management Security
Printed From: SalesCart
Category: Legacy Products
Forum Name: SalesCart Standard / PRO / SQL
Forum Description: All questions pertaining to SalesCart Standard, PRO and SQL should be posted here.
URL: http://forum.salescart.com/forum/forum_posts.asp?TID=261
Printed Date: November/24/24 at 4:29am
Software Version: Web Wiz Forums 11.04 - http://www.webwizforums.com
Topic: Plugin-Order Management Security
Posted By: cberish
Subject: Plugin-Order Management Security
Date Posted: December/15/04 at 7:23am
Out of the Box:
Is the Order Management Plugin secure?
Looking thru the manual, it has a user name and password
login.
However, what keeps an outside user from viewing the orders
(when an authorized user is checking orders)?
Does the inherant ASP to database connection do that?
Or do you have to set up the ORder Management plug to use a
SSL connection?
Thanks,
Clay
|
Replies:
Posted By: Techno Geek
Date Posted: December/15/04 at 8:48am
Securing the order management is pretty simple. What you'll need to do is first setup your username and password using the "sneek in" feature. Then get rid of the createadmin.asp page by checking the box on the login page.
You can also make sure that your order management is re-directed to the HTTPS mode. You do this by editing the META re-direct in default.htm. Make sure that you enter the full SSL path in there.
One final step is to actually remove the IUSR from this Online directory so that you receive a password challenege anytime you try to access the directory.
Out of the box the plug-in requires that you enter the username and password to view any of the pages.
-------------
Techno Geek
Customer Support Engineer
ComCity and SalesCart Technical Support
|
|