Knowledgebase

How to secure your admin

You should:

1. Rename the Zen Cart admin folder via FTP

2. Within the admin/includes/configure.php file change the entries for /admin/ to /new-name/ (All 3 of them)

First Section

// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_ADMIN', '/admin/');
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_ADMIN', '/admin/');
define('DIR_WS_HTTPS_CATALOG', '/');

Second Section

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', '/var/www/vhost/accountname/public_html/store/admin/');

3. (Optional)After you have done that use the Web Protect feature in your Cpanel to protect the newly renamed 'admin' folder with a User Name and Password. This feature will create the .htaccess protection of that folder for you.

4. This will give you a double login to your Zen Cart control panel.

(Optional)As an added measure you can restrict access to your admin to your ip address only by editing the .htaccess file in the newly renamed admin folder and adding the following to it:

Order Deny,Allow

Deny from all

Allow from "YOUR_IP_ADDRESS"

You can add more than one All from "some other ip address" to allow access to other admins on other ip addresses

Add to Favourites

Print this Article