{"id":4281,"date":"2014-04-03T08:59:01","date_gmt":"2014-04-03T08:59:01","guid":{"rendered":"https:\/\/bodhost.com\/kb\/?p=4281"},"modified":"2026-02-26T14:04:31","modified_gmt":"2026-02-26T14:04:31","slug":"zen-cart-security-tips","status":"publish","type":"post","link":"https:\/\/www.bodhost.com\/kb\/zen-cart-security-tips\/","title":{"rendered":"Zen Cart Security Tips"},"content":{"rendered":"
\r\n
\"Zen<\/a><\/figure>\r\n<\/div>\r\n\r\n\r\n
\r\n

With the help several handy steps we can make a Zen Cart website secure. The following steps will guide you:<\/p>\r\n\r\n\r\n\r\n

1 \u2013 \/zc_install folder needs to be deleted<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

After the successful installation of Zen Cart, you can delete the \/zc_install folder from your server. Simply delete that folder, do not rename it, because it will make you vulnerable if someone able to discover that renamed folder. After the installation and website testing, you should delete some other folders from your live website on the server: such as delete the \/docs\/ and \/extras\/ folders, as well as the \/install.txt file.<\/p>\r\n\r\n\r\n\r\n

\r\n

2 \u2013 Rename the admin folder<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

By using FTP software or the File Manager option from the control panel find Zen Cart \/admin\/directory. Rename that directory to match the settings that you just made.<\/p>\r\n\r\n\r\n\r\n

\r\n

3 \u2013 Ensure that configure.php files are read-only<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

It is really important that you must set read-only permissions on the two configure.php files. Set the permissions 644 or in some cases 444.<\/p>\r\n\r\n\r\n\r\n

\r\n

4 \u2013 Delete the Admin accounts which are not being used<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

In the admin area, open the Tools menu and select Admin Settings. Check how many unused Admin accounts listed there, delete them. \u00a0[Admin >>Tools >> Admin Settings]<\/p>\r\n\r\n\r\n\r\n

\r\n

5 \u2013 Password security of Admin logins<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

It is highly recommended to use complicated passwords so that potential intruders cannot easily guess them. It is also wise to change your admin passwords frequently. You can change your Admin passwords via Admin > Tools > Admin Settings, Cloud on the Reset Password button or click on the icon that looks like a recycle symbol to change the password.<\/p>\r\n\r\n\r\n\r\n

\r\n

6 \u2013 Admin access security<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

The following things are very important while working in your admin area:<\/p>\r\n\r\n\r\n\r\n

a) Always use only one web browser tab to access the admin area.<\/p>\r\n\r\n\r\n\r\n

b) Do not browse other website while your browser has an active admin login session enables even in another tab.<\/p>\r\n\r\n\r\n\r\n

c) Always log out of your admin when you are not using it.<\/p>\r\n\r\n\r\n\r\n

\r\n

7 \u2013 Securing define page content in html_includes file<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

Once you have completed editing of define pages [admin > tools > Define Pages Editor], you should secure them by using the following methods:<\/p>\r\n\r\n\r\n\r\n

a) Download a copy of them to your local machine by using FTP software. They are located in the \/includes\/languages\/English\/html_includes area.<\/p>\r\n\r\n\r\n\r\n

b) Set their permissions to 644 – \/includes\/languages\/English\/html_includes \u2013 and all files and folders underneath.<\/p>\r\n\r\n\r\n\r\n

\r\n

8 \u2013 Use .htaccess files to secure against unwanted snooping.<\/strong><\/p>\r\n<\/blockquote>\r\n\r\n\r\n\r\n

It is always a good alternative. Using htaccess files in all folders is the best choice for servers that accept them. For this you just need to create an htaccess file with the following code.<\/p>\r\n\r\n\r\n\r\n

#.htaccess to prevent unauthorized directory browsing or access to .php files.<\/p>\r\n\r\n\r\n\r\n

\r\n

IndexIgnore *\/*
<Files * .php>
Order deny, allow
Deny from all
<\/Files><\/p>\r\n\r\n\r\n\r\n

Incoming searches related to Zen Cart Security Tips<\/strong><\/p>\r\n\r\n\r\n\r\n