Security Considerations

At Ecommerce Templates we take security very seriously and have put some measures in place to maximize the integrity of your online store.

Please go through the following steps

Change the name of the vsadmin folder
This is quite simple. Download the vsadmin folder, rename it and upload it to the server again. (Don't delete the old vsadmin folder)
In the old vsadmin folder (the one that is still called vsadmin) open includes.php and add these two lines:
$disallowlogin=TRUE;
$notifyloginattempt=TRUE;
When updating remember you will need to upload the updater files to both the new and old folders.
Make sure you change the name of the vsadmin folder outside of your HTML editor so paths are not messed with.

Change the default password / login
Be sure to use DIFFERENT username / password combinations for your control panel, FTP, bank etc etc.

Back-ups
Do make sure that your host has a system in place for backing up your site. You can also make regular back-ups yourself but if there is any problem with your local copy, it's important to be sure the host has a good recent copy.

Check again
Check the above points at regular intervals in case permissions get changed or files get overwritten. Passwords and logins should also be regularly changed.

Read our files on fraud and checks
http://www.ecommercetemplates.com/help/fraud.asp
http://www.ecommercetemplates.com/help/checklist.asp

In Version 6.7 we added a new layer of security using a loginkey in the URL. Details of the set up are available in our parameters page

https://www.ecommercetemplates.com/phphelp/ecommplus/parameters.asp#loginkey

You probably wouldn't now need to use the second renamed vsadmin method above if you choose to use this new recommended approach.

Please feel free to review / rate our software