Security  

Support Topics: E-Commerce: How to: Install osCommerce

IMPORTANT SECURITY WARNING: Adding scripts to your site is a security risk no matter where it is hosted. Hackers are always looking for security holes in scripts (such as osCommerce) that they can exploit to send out spam or propagate viruses & scams. This could also mean severe damage to your website and other websites on the server. MacHighway asks that you frequently check oscommerce.com (external link) for important updates to your shopping cart system to prevent such exploits.

What you would use this for: To offer an online catalog and shopping cart for your visitors to view a description of products and make purchases.

What You Need:
An FTP client (Transmit - external link)
A text editor (TextWrangler - external link)
A MySQL Database (if you don't already have one setup for your site, please request one)

1. Go to http://www.oscommerce.com/ (external link) and download the latest Linux/Unix osCommerce installation package from the downloads section. We'll refer to this as the oscommerce.tar file. It is also a good idea to download the PDF documentation for osCommerce as well.

2. If the installation package doesn't expand automatically, double click
the oscommerce.tar file. This should force the compressed oscommerce.tar to expand into a folder that begins with "oscommerce", followed by a version number. We'll refer to this folder the oscommerce folder from now on.

3. Navigate into your oscommerce folder and find a folder called "catalog".

4. Upload the catalog folder into your "public_html" on the server.

5. Change the file permissions on the following file on the server to 777.
/catalog/includes/configure.php and /catalog/admin/includes/configure.php To do this using Transmit, highlight each folder individually and press command + i. In the window that pops up, you can either type 777 into the bottom field or make sure all boxes are checked.

6. Change the file permissions on the following files and folders:
/catalog/images to 777
/catalog/admin/includes/configure.php to 644
/catalog/admin/images/graphs/ to 777

7. Once all the files are successfully uploaded point your browser to: http://www.yourdomain.com/catalog/install/ - click "Install new online store". On the next screen make sure both check boxes on the next screen are checked and click "Continue"

8. Enter the following settings:
Database Server: your MySql server (Replace with the location of your MySql database as indicated in the e-mail "From MacHighway: Your MySQL access is set up".)
Username: your MySql username (usually your MacHighway ftp username)
Password: your MySql password (usually your MacHighway ftp password)
Database Name: YourUsername_db (replace YourUsername with your MacHighway username)
Persistent Connections: leave unchecked
Session Storage: Check Database
Click "Continue"

9. Click "Continue" on the Database Import page.

10. Enter the following settings: (replace "examplesite.com" with your website name, and "YourUsername" with the ftp username for your site.)
WWW Address: http://www.examplesite.com/catalog
Webserver Root Directory: /Library/WebServer/WebSites/YourUsername/public_html/catalog
Click "Continue"

11. Verify the osCommerce Configuration information is correct. This is the same information that you entered earlier. Click "Continue" - This should bring up a page that says "The configuration was successful!"

12. Delete the install folder from your webspace. /public_html/catalog/install/

13. Change the file permissions on the following files and folders:
/catalog/includes/configure.php to 644

14. Create a new folder called backups and upload it in the public_html/catalog/admin/ directory (in Transmit make sure you are in the directory and click the "New Folder" icon at the top)

15. The last task is to password protect your admin directory (public_html/catalog/admin/). In the fields below, enter the following settings:

Path: /Library/WebServer/WebSites/YourUsername/public_html/catalog/admin (replace "YourUsername" with the ftp username for your site)
Username: Your Username (or any username you would like to use)
Password: Your Password (or any password you would like to use)

Click the "Generate" button

htaccess and htpasswd generation form:

Path:
Username:
Password:

IMPORTANT SECURITY WARNING: Adding scripts to your site is a security risk no matter where it is hosted. Hackers are always looking for security holes in scripts (such as osCommerce) that they can exploit to send out spam or propagate viruses & scams. This could also mean severe damage to your website and other websites on the server. MacHighway asks that you frequently check oscommerce.com (external link) for important updates to your shopping cart system to prevent such exploits.

 

Support Topics

Blogs
Calendars
E-Commerce
Email
Form to Email
Guestbooks
Hit Counters
MacHighway Banners
Mailing Lists
Message boards and Forums
PERL
PHP & MySQL
Security
Site Wide Search Engines
Spam
SSL
Traffic Reports
Uploading / Publishing
Video
WebDAV