Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

› WebAssist Forums › eCart › eCart General / Announcements › how to secure ecart (and other webassist) folders?

how to secure ecart (and other webassist) folders?

Thread began 7/19/2013 3:58 am by Nutzo247 | Last modified 7/19/2013 8:51 am by Nutzo247 | 833 views | 2 replies |

7/19/2013 3:58 am | #1 Nutzo247

how to secure ecart (and other webassist) folders?

I want to secure ecart (and other webassist) folders on my site by preventing public users from browsing directories. I use .htaccess method block browsing to other areas of the such as the DW Connections folder. Could I use the same method or could suggest a better method?

BTW SSL is also enabled on the website.

.htaccess file

php:

AuthType basic

AuthUserFile "/home/sites/[domain folder]/[public siteroot folder]/[folder to be secured]/.htpasswd"

AuthGroupFile /dev/null

AuthName "Secure directory"

Require valid-user

.htpasswd file

php:

[username]:[password]

7/19/2013 4:19 am | #2 Jamie

if it helps, i create an .htaccess file with just the following in and place it in thefolder I want to stop prying eyes looking in:

Options -Indexes (I have attached the file as a zip should you wish to use it)

I then set up a 403 error page - to see this in action take a look at http://www.ybg.org.uk/uploads

I like it because its simple and specific and also the assets within the folder can still be used throughout the site without any issues at all (well none that I have come across)

Attached Files

htaccess.zip

7/19/2013 8:51 am | #3 Nutzo247

Thanks Jamie.

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.