OSCommerce, a potential security risk?
Webman asked:
So I hear that programmers can code and add add-ons to OSCommerce. But can’t this be a really big security risk? Like, what if someone goes in there and deletes the entire OSCommerce system? Or adds a virus to it?
So I hear that programmers can code and add add-ons to OSCommerce. But can’t this be a really big security risk? Like, what if someone goes in there and deletes the entire OSCommerce system? Or adds a virus to it?
That’s why you protect your PHP code and don’t allow R/W access to the actual files. And you put a good password on the admin panel.
As long as your webserver isn’t wide open, you should be fine. Of course, if you don’t know how to secure your webserver, you really shouldn’t be installing OSCommerce and taking credit card info.
In other words, it’s no less secure than any other website if it is properly secured.