
It is also possible to perform IP and domain restrictions using your
.htaccess file:
Order Allow, Deny
Deny from all
Allow from .myprestashop.com
Allow from 127.0.0.1
However, you should not put this kind of directive:
<LIMIT GET POST>
Require valid-user
</LIMIT>
Indeed, <LIMIT GET POST>
Making your PrestaShop install more secure
The recommendations below are sorted by order of importance:
1. Secure your back-office
1. Rename your /admin folder after the PrestaShop installation.
This is a must, and you actually cannot access your
PrestaShop administration if you haven't performed that
change. Make sure to pick a really unique name, ideally a mix
of letter and number, such as "my4dm1n".
2. Protect your admin folder with a .htaccess or .htpasswd file, or
ask your web host to do it for you.
3. Do not let your computer keep trace of your password (cookie
or any other helper).
Comentarios a estos manuales