How do I protect Shipping Agent from unauthorized access? Shipper 3
Send comments on this topic.
Frequently Asked Questions > How do I protect Shipping Agent from unauthorized access?

Glossary Item Box

Shipping Agent is a web service which provides access to the order information of your website and should be protected from anonymous access.

Shipping Agent for AbleCommerce

On the AbleCommerce website:

  1. Go to Admin and select People > Users.
  2. Add or editor a user.
  3. Make the user a member of the "Website Admins" or "Super Users" group.

On the workstation running Shipper 3:

  1. Select Shipping > Websites from the Navigation pane.
  2. Double click on a Website to open the configuration window.
  3. Fill in the username and password for the user above.
  4. Verify that the Shipping Agent URL uses the HTTPS protocol (not HTTP) so that the username and password are encrypted. For example, use https://company.com/agents/shippingagent.asmx instead of http://company.com/agents/shippingagent.asmx.

Shipping Agent for BV Commerce

On the BV Commerce website:

  1. Go to Admin and select the People tab.
  2. Create or edit a user.
  3. Make the user a member of a group with the "Login to Admin" permission.

On the workstation running Shipper 3:

  1. Select Shipping > Websites from the Navigation pane.
  2. Double click on a Website to open the configuration window.
  3. Fill in the username and password for the user above.
  4. Verify that the Shipping Agent URL uses the HTTPS protocol (not HTTP) so that the username and password are encrypted. For example, use https://company.com/agents/shippingagent.asmx instead of http://company.com/agents/shippingagent.asmx.

All Other Shipping Agents

On the server running IIS:

If you do not have access to the server, your hosting company can do this for you.
  1. Open Control Panel > Administrative Tools > Internet Information Services.
  2. Navigate to the Shipping Agent file (e.g. ShippingAgent.asmx or shipping-agent.php).
  3. Right click on the file and select Properties.
  4. Select File Security > Edit.
  5. Remove (uncheck) anonymous access and add authenticated access.

On the workstation running Shipper:

  1. Select Shipping > Websites from the Navigation pane.
  2. Double click on a Website to open the configuration window. 
  3. Fill in the username and password for a user that is allowed to access the Shipping Agent file.
  4. Verify that the Shipping Agent URL uses the HTTPS protocol (not HTTP) so that the username and password are encrypted. For example, use https://company.com/agents/shippingagent.asmx instead of http://company.com/agents/shippingagent.asmx.
©2009 Structured Solutions.