Renaming admin directory

[tunnel7]

Hello. Over the weekend I was notified by my host that a hacker had gained access through my installation of oscMax (I'm running v. 2.0 RC4, which is the most current).

What I would like to do is rename the admin directory but I suspect I need to change configuration files elsewhere. Can you please point me in that direction? And are there any new security fixes for RC4 (I don't see any).

Thanks in advance.

[lightdancer]

its in the wiki here is the link

http://wiki.oscdox.com/setting_up_security

[ridexbuilder]

And are there any new security fixes for RC4 (I don't see any).

Michael is quick to post security issues/updates - you need to take more notice!
osCMax v2.0 Forums - osCMax v2 Announcements at osCMax.com
[Though I don't receive updates via the newsletter for some reason.]
RC4 is well out of date - you should be on 2.0.4 now.

[michael_s]

(I'm running v. 2.0 RC4, which is the most current).

Not even close to the most current release. That was a release candidate. There have been 5 releases since then. You need to subscribe to the security newsletter to get all security notices:

osCMax opt in

You need to update your stire with all the security patches that have been released since then.

[pgmarshall]

I see quite a few posts of people who think they are running the 'latest' version and they are not ...

Perhaps we should look to install something like the zencart version checker and ping the oscmax server for the latest version and then have a warning in admin to tell people to upgrade?

Thoughts?

Regards,

[ridexbuilder]

Sounds like a plan.

In a similar vein (though I appreciate the wee bit extra work); it would be real handy to have a common file in the root (catalog) called, eg. version.txt. Containing the SVN. That way, it would be easier to track exact releases, especially for those of us who prefer to utilise the very latest. [Mostly done in order to benefit from bug fixes ].
This is still applicable to 'general release' versions, in that it's simpler to track exactly which patches have been applied. All, IMHumbleO, of course.

[pgmarshall]

Just cobbled together a few of the releases and dates into the Wiki ... although I am not sure about the older stuff v1.5 and v1.7 etc.

Link here for anyone who wants to view/extend/complete/correct!

Regards,