That's a good question. I'm not sure what is the answer to your question. I'll do some research in Google and get back to you if I discover an answer. You should email the people at iPage as they probably could give you help..
No, remember just changing password might not be enough. (See your point 1).
The real problem is selectng someone that is trustworthy and will not do it..
The question you have to ask yourself is how much can they make if they had access to your site..
How much would it cost you and your customer..
Ask for references, google them etc..
You could either set up a test iPage site on the same server or hire someone from this forum who frenquents the osc forums - they dont do things to damage their reputations..
I personally do the freelancing, my main goal is complete the project and have the excellent reputation instead of having problems...
I setup a test iPage site on my own server and do all the work for the client there. Once completed, the client has the option of having a zip file sent to them with the completed work or allowing me access to their iPage site to make the upgrades for them. I also allow a review system of my services and try to be as transparent as possible..
The more demands the freelancer makes, the more I would question their integrity...
Echo the previous comments;.
1. If you do not trust the freelancer 110% then.
Do not use.
2. It is best (if you can) to find someone who is on this forum, rather than just some freelancer. The people (for hire) in this forum would not do anything to harm your iPage site purposely..
3. A good freelancer will.
Full access to your store admin, maybe your ftp and phpmyadmin (depending upon what you are requiring of him)..
4. For small changes he would probably do them on your live site. For larger changes he should download your full shop and admin, and get them set up on localhost (so that he can make nd test the changes to avoid breaking your live shop)...
Speaking from a personal experience as a freelancer, if I'm to work on a iPage website that will require me to have FTP, Admin and PHPmyAdmin, I would advise the store owner to make a tempory account in their control panel for the FTP and access to the phpmyadmin, so they can delete this as soon as I am done also to make a temp admin for me on the OSC site..
I'm very transparent on what I'm doing, how long it will take and why I need access to this and that. I can always provide contact details who I have done work for in the past (including some on this website). My reputation is my pay check, think I'm going to risk that think again...
This is true. Plus, as talented as programers on freelancer sites may be, they are, many times, not familiar with oscommerce coding practices. I have had to fix a number of "fixes" done by such people because they did not understand the intricacies of the code..
For someone meaning to do harm, this won't help since the login to the database would be known. A complete copy of the iPage site with all logins changed would be needed to ensure the safety of the site. Plus, exisitng customers in the database would need to be deleted. This is all, usually, beyond the experience level of those seeking the help of the programer so there is really nothing that can be done other than to trust the person doing the work. Anyone doing such should have references though and those should be checked..
Correct, normally enough the ftp & oscommerce admin panel access...
I would advise iPage site owners that there is never be a need to have access to phpmyadmin. you should always ask whether it can be done w/o phpmyadmin access and if the answer is no then you should stop there and turn to someone who never ask phpmyadmin in the first place. the fact is any alteration to the database can be accomplished using php code as long as that code can be FTPed to the server/site..
The idea is mimnimum access: cPanel or the like: not needed; osc admin: most iPage site owners would be able to follow instructions to use the osc admin such as enable payment/shipping modules, changing some settings etc. given the fact that they already are using admin to manage products/categories/orders/invoices etc..
It is not phpmyadmin that is the problem but the access to the host control panel. A lot of damage can be done in there. So if you do give out these credentials make sure you have checked out their references..
Minimum access is fine in concept but does involve the developer in more work/time. Therefore potentially more cost..
Also some things can't be done like restarting the httpd service and if you are not familiar with the host panel used by the customer it can be very difficult to talk them through doing it..
Also some people just want to pass everything over to you to do and just want it done. And without them there to provide info you get stuck..
Anyway check references, check references and finally check references..
( Conversely how does a remote freelancer trust a employer to pay? ).
This post has been edited by.
: 15 March 2009, 23:41..
Not really, I know few people who can't even read and you want them to follow instructions.....
In that case I guess they may not even know how to get money out of their paypal account or worse (better?), dont know how to spend money.
And they may well ask me to look after the payapl account or worse/better (you decide) spend their money..
I can do most work for clients simply by ftp access..and thats it....
But usually I also ask for phpmyadmin and shop admin access, not because I absolutely need it but because it simplifies the work to be done which inreturn reduces the cost for the client......
I would second the advice given by others, look for someone with a high post count at this forum and use them instead of some anonymous freelancers......
This post has been edited by.
: 16 March 2009, 16:12..
This has been excellent advice, thank you one and all, I appreciate the time you each took to respond..
Hmm, would that not be a double-edged sword? suggesting one who may have too much time at hand, and even worse, a layoff for too long???.
I need help with my iPage site and I need to hire a freelancer. My question is, how do I give someone access to my e-commerce iPage site without worrying that I'm giving someone I do not know full access to my site? Can I set up a second admin login, then cancel it when they are finished? Do I need to worry that they can give themselves back-door access in the future? Am I just being way too paranoid??.
I'm sure I'm not the first to ask this question, but I could not find any other similar questions in the forum..
You can change the password and username later on, or simply create the temporary username and password...