Securing Zen Cart

[mansoor]

Hi,

I wants to secure my zen cart site. I have some confusion about installation of zen cart.

SSL certificate is installed on my site. I have two directories on my linux server:
1. httpdocs
2. httpsdocs

i want to secure my admin, customer area and checkout process. Now i don't know which file or folder i upload in httpsdocs or httpdocs.

Can anyone help?

Thanks

[Merlinpa1969]

you need to install zen cart in the httpdocs

once you run the installer you need to make a copy of ALL the files to https docs,

you will need to modify the httpdocs/includes/admin/configure.php and maks sure that all of the defines for the admin are set to https

now you need to modify the httpsdocs configure.php files,.

make sure to make the change listed above and also you will need to change the server paths to reflect httpsdocs

[mansoor]

Well make first copy of site on httpdocs and run installer then make another copy of site on httpdocs or httpsdocs (you write httpdocs).

Will it secure my customer area also?

[Merlinpa1969]

yes zen cart is smart, it knows when to go to SSL

but you need a complete set of files in BOTH httpdocs and httpsdocs

[Uncle_Unix]

If your system has a newer version of Apache2 you can go into your /etc/apache2/sites-availble and ///sites-enabled and set the config to virtual host the entire site on one set of files.

Uncle_Unix needs a rest now

[kitcorsa]

im wondering about this also. do i just copy the files from my htdocs to my ssl folder on the server or do i run the installer again on the ssl folder as well as the normal folder??

also which files do i mod and what parts do i mod??

[Merlinpa1969]

you just need to move the files over

and you need to alter the
includes/configure.php
and
admin/includes/configuration.php


Uncle has great advise for anyone that has root access to the server,

[designer25]

you need to install zen cart in the httpdocs

once you run the installer you need to make a copy of ALL the files to https docs,

If you modify the look of your site do you also need a copy (of what you modified) in each directory as well (?) I'm assuming you do - no (?)

[Merlinpa1969]

Yes, any changes you make to one, you need to make to the other,
you could ask your host to symlink the httpsdocs

[kitcorsa]

so how does this soiund for a tutorial??

1) upload zc files to htdoc on server
2) install sl on server
3) instally zen and choose dont use ssl at this stage
4) once installed and working install all mods admin style etc
5) open the include/configure.php file in text editor and edit the code

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://www.enteryoursite.com/zencart');
define('HTTPS_SERVER', 'https://www.enteryoursitessl.com/zencart');
// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'false');

Save file and upload to server

6)open admin/includes/configure.php and edit

* URLs for your site will be built via:
* HTTP_SERVER plus DIR_WS_ADMIN or
* HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
* HTTP_SERVER plus DIR_WS_CATALOG or
* HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
* ...depending on your system configuration settings
*/
define('HTTP_SERVER', 'http://localhost');
define('HTTPS_SERVER', 'https://localhost');
define('HTTP_CATALOG_SERVER', ''http://www.enteryoursite.com/zencart');
define('HTTPS_CATALOG_SERVER', 'https://www.enteryoursitessl.com/zencart');

Save and upload

7) turn ssl back on by loading site, open admin section, configure site

8) copy all file from htdoc to computer then upload to your htdocssl foulder


does that sound right????