Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

How to Keep Your OpenCart Store Safe From Hackers

This guide shows simple steps that make your OpenCart online shop much harder to break into.

Online Stores2 min read9 steps

What is OpenCart?

OpenCart is free software for running an online shop. A hacker is a person who tries to break into a website without permission. Shops hold customer details, so they are a favorite target.

Before you start

Some steps change files. A mistake can break your shop. Take a full backup first. A backup is a safe copy of your site that you can restore if something goes wrong.

Steps

  1. Update OpenCart. Old versions have known holes that hackers use. Check the OpenCart site for the newest version and follow its upgrade notes.
  2. Update your extensions and themes. An extension is an add-on that gives your shop a new feature. Remove any you no longer use.
  3. Rename the admin folder. By default, the control area of your shop sits in a folder called admin. Rename it to something only you know. Then edit the config.php file in the main folder and the config.php file inside that renamed folder, so the paths match the new name.
  4. Use a strong admin password. Make it long. Mix letters, numbers and symbols. Do not use it anywhere else.
  5. Move the storage folder. Newer OpenCart versions have a storage folder that holds logs and uploads. Move it above your public web folder, so nobody can open it from a browser. Then update the path in both config.php files.
  6. Protect the config files. Using File Manager in your control panel, set both config.php files to permission 444. Permissions decide who may read or change a file. 444 means read only.
  7. Turn on SSL. SSL puts a padlock on your site and scrambles data between the visitor and your shop. Ask Hostvento support if you need help adding it.
  8. Delete the install folder if it is still there. Hackers can misuse it.
  9. Check the admin log in the OpenCart dashboard now and then for logins you do not recognise.
Tip: Set a reminder to take a backup every week. Also keep a copy on your own computer.

Quick recap

  • Back up before you change anything.
  • Keep OpenCart, themes and extensions up to date.
  • Rename the admin folder and use a strong password.
  • Move the storage folder out of the public area.
  • Make config files read only and use SSL.