Author Topic: Few things  (Read 1642 times)

Offline userdelr00t

  • Newbie
  • *
  • Posts: 1
  • Karma: +1/-0
    • View Profile
Few things
« on: March 20, 2015, 11:51:33 AM »
First of all thank you for the nice cart.  Nice job, and please for the love of pete keep up with it.

Second, a few things that need to be addressed it isn't a emergency but would like to see it fixed on an update.

I have not tested this on user accounts because I am still working on the site, however it should not ever happen for the admin account.
You are able to continuously attempt to login as the ADMIN. I could not find an option to disable multiple attempts etc.
Can there be a setting for this as it is a security concern that automated scripts could continuously try to guess your login info.
Add a Captcha after the 2nd failed login attempt.  The admin account could check a file on the server .lck-adm.  That way the file could be deleted so the actual admin could get back in.
Just some ideas, but that needs to be addressed as soon as you all can.

The other part is if you go to  demo.abantecart.com on your cell phone, and turn your cell phone into landscape mode, The menu item is above the AbanteCart logo and out of place. 

Keep up the good work.

Offline eCommerce Core

  • Administrator
  • Hero Member
  • *****
  • Posts: 1600
  • Karma: +93/-1
    • View Profile
Re: Few things
« Reply #1 on: March 23, 2015, 09:05:57 AM »
I have not tested this on user accounts because I am still working on the site, however it should not ever happen for the admin account.
You are able to continuously attempt to login as the ADMIN. I could not find an option to disable multiple attempts etc.
Can there be a setting for this as it is a security concern that automated scripts could continuously try to guess your login info.
Add a Captcha after the 2nd failed login attempt.  The admin account could check a file on the server .lck-adm.  That way the file could be deleted so the actual admin could get back in.
Just some ideas, but that needs to be addressed as soon as you all can.

I do not think this is necessary. Admin URL suppose to be kept private with unique parameter identifier. This parameter can be changed easily if needed. No scripts can get to this URL (unless you make this URL public, that you should never do)

Additionally, there is warning in the notification that will indicate failed login attempts. If you see them and it was not anyone you know, you can change URL.



“If you’re in the luckiest one per cent of humanity, you owe it to the rest of humanity to think about the other 99 per cent.”
― Warren Buffett

Offline eCommerce Core

  • Administrator
  • Hero Member
  • *****
  • Posts: 1600
  • Karma: +93/-1
    • View Profile
Re: Few things
« Reply #2 on: March 23, 2015, 09:06:51 AM »

The other part is if you go to  demo.abantecart.com on your cell phone, and turn your cell phone into landscape mode, The menu item is above the AbanteCart logo and out of place. 


We can check this issue. What is the phone and version of OS do you use? Can you please post a screenshot?
“If you’re in the luckiest one per cent of humanity, you owe it to the rest of humanity to think about the other 99 per cent.”
― Warren Buffett

Offline Basara

  • Administrator
  • Hero Member
  • *****
  • Posts: 4396
  • Karma: +205/-0
    • View Profile
Re: Few things
« Reply #3 on: March 23, 2015, 09:11:40 AM »
You can always find your unique admin parameter in configuration file on your server.

/system/config.php

Look for define('ADMIN_PATH', 'myuniqueadmin');

mydomain.net/index.php?s=myuniqueadmin
“Chuck Norris is so amazing.”
― Mother Teresa

 

Powered by SMFPacks Social Login Mod