Any heavy magento user here? How secure is magento?
- Thread starter seoactive
- Start date
Fair enough, but i dont think its just me. A wordpress site getting hacked/infected with malicious codes are more and more common these days. Its not too much concern for me as I have backup and I can always restore it.
However, operating a ecommerce store is a different story... I have customer's info there etc. So I definitely want to secure it the best I can.
DamageX
Elite Member
- Sep 17, 2008
- 2,692
- 1,691
That's not so much an issue of WP being vulnerable as it's an issue of the myriads of poorly coded themes and plugins used.
Well, I am planning to purchase a magento theme from themeforest along with a few 'extensions' for my upcoming ecommerce site. Do you have any advice or suggestion on this? Maybe some info that I should be aware of beforehand so I can avoid if possible? Thx in advance.
I've been using Magento for around 5 years now and found it to be very secure. I have it set up on a VPS. As the code is open source, I spent a few weeks reading over certain parts of code that I knew were vital and familiarising myself with how it works.
I've had no issues with any security issues. If you do install Magento, the first thing you should is change your default admin path (eg - www.yourstore.com/admin) - a quick search will show you how to do this.
I've had no issues with any security issues. If you do install Magento, the first thing you should is change your default admin path (eg - www.yourstore.com/admin) - a quick search will show you how to do this.
Kazi_Haque
Regular Member
- Aug 13, 2010
- 325
- 429
How you guys removed index.php URLs from Magento backend and frontend?
I tried robots.txt file but it didn't help.
Any suggestion?
I tried robots.txt file but it didn't help.
Any suggestion?
Turn on Web Server Re-writes in the admin of your Magneto install. You can find it at System->Configuration->Web->Search Engine Optimization.
You have to enable mod_rewrite in apache to make clean urls to work. Remember to flush your cache after doing this.
You have to enable mod_rewrite in apache to make clean urls to work. Remember to flush your cache after doing this.
You should also add this into your .htaccess file:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>