Secure use of Clover Shop

Pfishing, spam, firewalls, anti-virus... Please consider these following issues when using the Clover Shop shopping cart software. It is all for your good. This article concerns the new-generation Clover Shop software only.

Suspect Everything

• Our customer support always use a specific e-mail address.
• Our customer support always use either www.clovershop.com or ssl.clovershop.com.
• Do not install any files that you receive to your e-mail box, other than the files that you have specifically requested from us.
• Never give your passwords to any external web form. We will never request that.

Keep the Software Up-to-Date

• Upgrade your Clover Shop software at least once every second year.
• Subscribe to the Clover Shop Newsletter.

Install the Software Properly

• If possible, always use secure FTP mode (SFTP). For example free Filezilla supports SFTP.
• If possible, install at least the administration folder to a SSL secure web server. This does not concern the Ultralite edition.
• Rename the administration folder.
• If your web server supports .htaccess file, always protect the administration folder with a .htaccess password protection. Change the password once a month. If your web server does not support .htaccess password protection, contact your Internet Service Provider in order to protect the administration folder well.
• If your web server supports .htaccess file, activate the original .htaccess files by removing the #-characters from the beginning of the lines. This will increase the security in the case when some other security measures have failed.

Use the Software Wisely

• Use administration page login password that is not easy to guess.
• Change your administration page login passwords once a month.
• Never store any credit card details or sensitive data in the administration page.
• Backup your files: Connect to your web server using secure FTP protocol (SFTP). Download all Clover Shop files and save them to a CD. Do this once a month.
• Backup your databases: In the administration page, click the "Create a backup" button at least once a week. Then once a month, connect to your web server using secure FTP protocol (SFTP), download all the backup files (*.sql) and save them to a CD. Then delete all old backup files from the web server.
• Always look over the order details, prices and grand total before processing the order.
• Always check and double-check the payment status if you are using external payment services such as e-payments.

If you have any questions, please contact our customer service.

Clover Shop > Secure use of Clover Shop
Customer Service | Copyright © 2001- Clover Wheel Ltd | info@cloverwheel.com