Zen Cart Logo
Forums / Other Business Topics / need someone to install .htaccess in folder

need someone to install .htaccess in folder

Views: 94

Results 1 to 6 of 6
29 Aug 2012, 8:45 PM
#1
loubyloo avatar

loubyloo

New Zenner

Join Date:
Apr 2011
Posts:
10
Plugin Contributions:
0

need someone to install .htaccess in folder

need someone to install .htaccess in folder. Where can I find someone reliable that does not charge extortionate amount?

29 Aug 2012, 9:15 PM
#2
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: need someone to install .htaccess in folder

Who told you that you need an .htaccess file, and why?

What's the big long business story that brought you to the point of asking this question in the first place?

(because you can upload any file, named .htaccess or otherwise, in about 3-5 seconds using your FTP program. Of course, you want the correct contents in that file, hence the questions I'm asking you above.)

30 Aug 2012, 12:59 PM
#3
loubyloo avatar

loubyloo

New Zenner

Join Date:
Apr 2011
Posts:
10
Plugin Contributions:
0

Re: need someone to install .htaccess in folder

I just remembered today that I could add the store to facebook and couldn’t remember why I hadn’t done so. Anyway it became apparent when it loaded and none of the products were watermarked.
So I contacted the company that does the facebook application and what they said totally astounded me.
They said that my products are not secure? and here is what they also said:

The images are uploaded by default into /images folder by Zencart e.g.
http://www. d i g i t a l d e l i g h t s b y l o u b y l o o . c o m /images/Spellifying%20witch%20piecing.jpg

As per my previous message, none of your images in this location are secure from unauthorised download. It just relies on the fact people can't guess your filenames, but since they are the same as the product names, this is too easy to guess.

The simplest and most secure solution would be to watermark your images prior to upload, and upload a non-watermarked version as the digital download 'product'. Normally the digital download is placed in a secure folder that is not publicly accessible, reducing the possibility of unauthorised download.

The more complex solution is to move the product images into a sub-folder of images and make it inaccessible to the public via .htaccess file, but still allow the online watermark plug-in to access them. Then update the eCommerce Browser plug-in to retrieve the images from the watermark cache location rather than the default folder.

If you need to do the second option, perhaps you can tell me what module you are using to do the watermarking? I can take a quick look and try and work out how to select the watermarked image, rather than the default.
They are in a private folder, i.e. you can't view the contents of the folder, but the folder is publicly accessible. Therefore if you can guess the name of the picture (or in the eCommerce Browser case read it from the database) you can access the images directly with no security.

Your system is working by getting the images from this folder and dynamically watermarking them and then serving them from a temporary cache folder. Which is fine, except the originals are publicly accessible.

Normally we would set-up the products so that the were in a sub-folder e.g. images/products/ and then create a .htaccess containing "deny from all", stopping all public access. You need a sub-folder as the general site images located in the same images folder must remain accessible for your website to work. To do this you need to move the images to the new folder and update all the products so the they link to the sub-folder.

After doing that eCommerce Browser would stop being able to display images and we would need to update the script to reference the cache folder. If you can tell me the module you are using I can look at doing the update to eCommerce Browser.

They said that this is really just about an hours fix but cannot seem to find anyone to help with it and I think it needs secured very quickly?

Can you fix this and if so what would the cost be.
Thanks
Wendy Hall

2 Sep 2012, 8:15 PM
#4
loubyloo avatar

loubyloo

New Zenner

Join Date:
Apr 2011
Posts:
10
Plugin Contributions:
0

Re: need someone to install .htaccess in folder

Apparently my images folder is not secure and I need someone to take fix it and apparently an htaccess folder is what is needed. It all started when I tried to add my store to facebook using an application for there and all the store images came up as unwatermarked. The company said that this is because my images folder is not secure? So I really need someone to take a look at it and fix this!

2 Sep 2012, 9:19 PM
#5
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: need someone to install .htaccess in folder

As far as Zen Cart itself goes, there isn't much "security" needed on the /images/ folder, other than the supplied /images/.htaccess that comes with Zen Cart.

But from the info you posted about your facebook application, it sounds like you've got something completely different going on than what Zen Cart does out-of-the-box.

So whatever help you need is related to your site's specific customizations, and/or whatever facebook application you added to it.

It would probably be most expeditious to have whoever made or added your facebook stuff to your site be the ones to look after fixing whatever issues have been created by adding it.

3 Sep 2012, 5:56 PM
#6
coolcarpartsonline avatar

coolcarpartsonline

Totally Zenned

Join Date:
Feb 2008
Posts:
1,386
Plugin Contributions:
0

Re: need someone to install .htaccess in folder

I have had Facebook store before and never needed to secure my images.