New Zenner
- Join Date:
- Apr 2011
- Posts:
- 10
- Plugin Contributions:
- 0
need someone to install .htaccess in folder
need someone to install .htaccess in folder. Where can I find someone reliable that does not charge extortionate amount?
Views: 94
New Zenner
need someone to install .htaccess in folder. Where can I find someone reliable that does not charge extortionate amount?
Sensei
Who told you that you need an .htaccess file, and why?
What's the big long business story that brought you to the point of asking this question in the first place?
(because you can upload any file, named .htaccess or otherwise, in about 3-5 seconds using your FTP program. Of course, you want the correct contents in that file, hence the questions I'm asking you above.)
New Zenner
The images are uploaded by default into /images folder by Zencart e.g.
http://www. d i g i t a l d e l i g h t s b y l o u b y l o o . c o m /images/Spellifying%20witch%20piecing.jpg
As per my previous message, none of your images in this location are secure from unauthorised download. It just relies on the fact people can't guess your filenames, but since they are the same as the product names, this is too easy to guess.
The simplest and most secure solution would be to watermark your images prior to upload, and upload a non-watermarked version as the digital download 'product'. Normally the digital download is placed in a secure folder that is not publicly accessible, reducing the possibility of unauthorised download.
The more complex solution is to move the product images into a sub-folder of images and make it inaccessible to the public via .htaccess file, but still allow the online watermark plug-in to access them. Then update the eCommerce Browser plug-in to retrieve the images from the watermark cache location rather than the default folder.
If you need to do the second option, perhaps you can tell me what module you are using to do the watermarking? I can take a quick look and try and work out how to select the watermarked image, rather than the default.
They are in a private folder, i.e. you can't view the contents of the folder, but the folder is publicly accessible. Therefore if you can guess the name of the picture (or in the eCommerce Browser case read it from the database) you can access the images directly with no security.
Your system is working by getting the images from this folder and dynamically watermarking them and then serving them from a temporary cache folder. Which is fine, except the originals are publicly accessible.
Normally we would set-up the products so that the were in a sub-folder e.g. images/products/ and then create a .htaccess containing "deny from all", stopping all public access. You need a sub-folder as the general site images located in the same images folder must remain accessible for your website to work. To do this you need to move the images to the new folder and update all the products so the they link to the sub-folder.
They said that this is really just about an hours fix but cannot seem to find anyone to help with it and I think it needs secured very quickly?
Can you fix this and if so what would the cost be.
Thanks
Wendy Hall
New Zenner
Apparently my images folder is not secure and I need someone to take fix it and apparently an htaccess folder is what is needed. It all started when I tried to add my store to facebook using an application for there and all the store images came up as unwatermarked. The company said that this is because my images folder is not secure? So I really need someone to take a look at it and fix this!
Sensei
As far as Zen Cart itself goes, there isn't much "security" needed on the /images/ folder, other than the supplied /images/.htaccess that comes with Zen Cart.
But from the info you posted about your facebook application, it sounds like you've got something completely different going on than what Zen Cart does out-of-the-box.
So whatever help you need is related to your site's specific customizations, and/or whatever facebook application you added to it.
It would probably be most expeditious to have whoever made or added your facebook stuff to your site be the ones to look after fixing whatever issues have been created by adding it.
Totally Zenned
I have had Facebook store before and never needed to secure my images.
Tell staff why this post should be reviewed.