WonderDesk Standard Installation

 

Please use the included install.txt file instead of the following. The install.txt is most likely more up to date than this manual.

 

**********************************************************************

* Important! Please NOTE: Getting the WonderDesk running is only

* half the battle. Please pay attention to the security notes !!!

**********************************************************************

 

 

Step 1. If you are installing this on a Unix flavor web host, edit the first

 line in all .cgi files to reflect the proper perl path.

Example: #!/usr/local/bin/perl

 

If installing on an NT server, you must edit all .cgi files and specify

the full path. E.g. D:/Inetpub/yoursite.com/cgi-bin/wonderdesk

 

Step 2. Edit generator.cgi and edit the $site variable to reflect the full URL

 of your controlpanel.cgi

Example: http://www.webwonderland.com/cgi-bin/wonderdesk/secure/controlpanel.cgi

 

 

Step 3. Use your favorite FTP program to create a directory under your

cgi-bin. This is the safest place to install the script. You may

 name the directory anything you want. In this example, I called

 it /wonderdesk.

 

NOTE: If you use WS_FTP or CuteFTP, you can just drag the wonderdesk folder

to your server and all of the files and folders will be uploaded in to

their proper positions.

 

IMPORTANT: All files except for the images must be uploaded in ASCII mode.

 

 /cgi-bin/wonderdesk

 

 wonderdesk.cgi (755) -rwxr-xr-x

 index.html (644) -rw-r--r--

 

 

 Make sure to assign the proper permissions to the files. If you

 are using CuteFTP, right click the file then "Change file properties"

 

 

Step 4. Create a subdirectory called /secure (must be called /secure)

 Upload these files:

 

 /cgi-bin/wonderdesk/secure

 

  .htaccess (644) -rw-r--r-- (Read NOTE below)

  auth.pl (644) -rw-r--r--

  customer.cfg (644) -rw-r--r--

  customerhtml.pl (644) -rw-r--r--

  default.cfg (644) -rw-r--r--

  email.pl (644) -rw-r--r--

  faq.cfg (644) -rw-r--r--

  faqhtml.pl (644) -rw-r--r--

  index.html (644) -rw-r--r--

  language_dutch.cfg (644) -rw-r--r--

  language_english.cfg (644) -rw-r--r--

  language_french.cfg (644) -rw-r--r--

  language_german.cfg (644) -rw-r--r--

  language_korean.cfg (644) -rw-r--r--

  language_portuguese.cfg (644) -rw-r--r--

  language_swedish.cfg (644) -rw-r--r--

  language_spanish.cfg (644) -rw-r--r--

  language_norwegian.cfg (644) -rw-r--r--

  Mailer.pm (644) -rw-r--r--

  masterhtml.pl (644) -rw-r--r--

  masterengine.pl (644) -rw-r--r--

 

  controlpanel.cgi (755) -rwxr-xr-x

  generator.cgi (755) -rwxr-xr-x

  teditor.cgi (755) -rwxr-xr-x

 

  closed.db (66x) -rw-rw-rw (I don't like putting

  customer.db (66x) -rw-rw-rw three 6's together)

  customer.count (66x) -rw-rw-rw-

  faq.count (66x) -rw-rw-rw

  faq.db (66x) -rw-rw-rw

  news.txt (66x) -rw-rw-rw

  news-internal.txt (66x) -rw-rw-rw

  default.count (66x) -rw-rw-rw-

  default.log (66x) -rw-rw-rw-

  default.pass (66x) -rw-rw-rw-

  open.db (66x) -rw-rw-rw

  variables.cfg (66x) -rw-rw-rw-

  variables_email.cfg (66x) -rw-rw-rw-

  variables_tech.cfg (66x) -rw-rw-rw-

 

Step 5. Create a /templates subdirectory under the secure directory.

(must be called /templates)

 Upload these files:

 

 /cgi-bin/wonderdesk/secure/templates

 

  default.html  (66x) -rw-rw-rw

  email_close.txt (66x) -rw-rw-rw

  email_emergency.txt (66x) -rw-rw-rw

  email_modify.txt (66x) -rw-rw-rw

  email_notify.txt (66x) -rw-rw-rw

  email_reply.txt (66x) -rw-rw-rw

  email_tech.txt (66x) -rw-rw-rw

  email_update.txt (66x) -rw-rw-rw

  templ_add.html (66x) -rw-rw-rw

  templ_customer.html (66x) -rw-rw-rw

  templ_delete.html (66x) -rw-rw-rw

  templ_failure.html (66x) -rw-rw-rw

  templ_faq.html (66x) -rw-rw-rw

  templ_home.html (66x) -rw-rw-rw

  templ_login.html (66x) -rw-rw-rw

  templ_loginfail.html (66x) -rw-rw-rw

  templ_modify.html (66x) -rw-rw-rw

  templ_result.html (66x) -rw-rw-rw

  templ_search.html (66x) -rw-rw-rw

  templ_signup.html (66x) -rw-rw-rw

  templ_stats.html (66x) -rw-rw-rw

  templ_success.html (66x) -rw-rw-rw

 

 

 

Important NOTE! The /secure directory should be password protected! For Unix users,

use your own .htaccess file to password protect this. If you don't know how to set

up .htaccess security, upload the included .htaccess file after you have

completed Step 8. This included .htaccess file denies all login attempts, including

you. It is very secure, but you won't be able to access your control panel if you

use this included file.

 

NT users should ask their administrators to set a username and password for this

directory.

 

Step 6. Under the /secure directory, create a subdirectory called /userlog

 (this directory must be (777 drwxrwxrwx) and called /userlog)

 

 /cgi-bin/wonderdesk/secure/userlog

.htaccess (for Unix only) (644) -rw-r--r--

index.html (644) -rw-r--r--

 

 For an added security, you can include the .htaccess file for

 Unix machines only.

 

 

Step 7. Create an /images/wd directory under your html root.

 Example: http://www.yoursite.com/images/wd

 (This directory will be referenced when you run the controlpanel.cgi)

 Images can be uploaded in binary or automatic mode.

 

 

yoursite.com/images/wd

 

 0.gif

 1.gif

 2.gif

 addme.gif

 background.gif

 etc...

 

 

 

Step 8. Run the controlpanel.cgi and edit the variables accordingly.

Don't forget to do the general, technician, and email variables.

 

NOTE: If you have trouble getting past the username/password screen when you

try to run the controlpanel.cgi, it's probably because you are using the

included .htaccess file which will deny everyone, including you! Read the

Important NOTE in Step 4 again.

 

 

You are ready to roll! Due to the many on-mouse-overs, the WonderDesk

looks best when browsed with Internet Explorer.

 

Refer to http://www.wonderdesk.com/faq.html for more information on how to

use the WonderDesk.

 

 

Administrator login:

 

Username:admin (never change this name)

Password:admin (you can change this password at any time)

 

 

 

========================================================================

= More info: =

========================================================================

 

Security info:

 

The only files that should be accessible from the net are wonderdesk.cgi

and index.html.

All requests to the script will go through wonderdesk.cgi, and letting

people view the password file, secure directory, or userlog director is a

major security risk (risk to WonderDesk's built in security, not to the

security of the system).

 

After you have everything up and running, see if you can read any of these

critical files by typing in their location. You should check these, and you

should be denied from viewing them or downloading them:

http://yoursite.com/cgi-bin/wonderdesk/secure/open.db

http://yoursite.com/cgi-bin/wonderdesk/secure/default.pass

http://yoursite.com/cgi-bin/wonderdesk/secure/userlog/

http://yoursite.com/cgi-bin/wonderdesk/secure/controlpanel.cgi

 

Making sure Directory Indexing is off or place all the files in a cgi-bin

directory. Also, if you are on a Unix system, put the included .htaccess

file in the userlog directory, and set up your own for the /secure directory.

(Refer to the NOTES in Step 4 and 7)

 

NT users may need to get their administrators involved to password protect

your /secure and /userlog directories.