paypal ipn - callback to a secured directory

[edot3]

Hi there everyone,

Quick question...

One of my sites got hacked last night...got it back online today thanks to good backups, and I have included some extra security measures which were recommended to me.

One of these was to password protect the entire /administrator/ directory of my Joomla! 1.5.10 install.  This means that you effectively need 2 usernames and passwords to get into the site.  (An extra layer of security, as it were)

This seems like a great idea, but the client now reports that the paypal IPN is not automatically updating the order status for them, it was before the hack.

Could this secured directory be causing this?  If so, is there any way Can include a username and password in the ps_paypal.cfg.php file?

[aravot]

Try moving notify.php to another folder see if it helps

[edot3]

I can't unfortunately, it needs to be in the administrator folder for various reasons.  I've removed the password protection as I thought of another method.  Thanks for your help.