I have observed very strange but scary thing. Anyone can access all my shopping cart pages without login, just going to www.domain..comm/admin/specials.php How is that possible? Is hosting not secured or what??
I can't post my url here. Its php/mysql script and database. osCommerce shopping cart. I don't understand how all the pages can be accessed without login? I mean any one can simply access going to www.domain..comm/admin/special.php or www.domain..comm/admin/orders.php or for that matter any page on the shopping cart. Is it something to do with unsecured hosting or what else?