Restrict Access to Magento Website

Question

I have set up a second website under the same magento installation which will be used as a pos for a physical store. I want to however restrict access to the website as it is not formatted for public access and there are products on there that I dont want people to purchase.

The only access we need to the 'pos' website is through an extension i.e. domain.com/pos/webpos/....

Everything else needs to be completely closed to the public (and google for SEO reasons)

Does anyone know how to go about this? Or perhaps create a redirect so everything gets directed to the 'actual' website

The actual online website for the 'public' to buy items is mydomain.com. The other 'offline pos website' is mydomain.com/pos I say 'offline' because it has products that are only sold offline in the physical store.

Therefore anyone who accesses mydomain.com/pos/....... should be directed back to mydomain.com. except if they are a store employee accessing mydomain.com/pos/webpos/ which is the only part of the 'pos' website that needs access.

Answer 1

Solution 1: Change website based on module

This is a simple solution but requires that you change the base URL for the POS website to the same as the default website. There will be no more /pos subdirectory, just example.com/webpos.

In this particular case I would set the website code based on the URL. In the .htaccess file, you can do it like this:

SetEnv MAGE_RUN_TYPE website
SetEnvIf Request_URI "^/webpos/" MAGE_RUN_CODE=pos

This way URLs starting with /pos/webpos always use the POS website (website code pos and all other URLs use the default website.

Solution 2: Redirect

If you want to keep example.com/pos/webpos as base URL for the POS website, you probably have created a subdirectory pos with its own .htaccess file. There you can add this rule to redirect every request that does not start with webpos to the same URL of the default website:

RewriteCond %{REQUEST_URI} !^/webpos
RewriteRule (.*) http://example.com/$1 [L,R=301]

Answer 2

For any of you that may also have this problem here is the solution we came up with. In the head.phtml template /app/design/frontend/theme/themename/template/page/html/head.phtml

we inserted this code

    <?php 
if(strstr($_SERVER['REQUEST_URI'],'/pos') && (!strstr($_SERVER['REQUEST_URI'],'/pos/webpos')))
{
    header("location: //www.mydomain.com");
    die;
}
?>

This seems to work perfectly. If anyone has a reason why this isn't good code please let me know.

I say we in the answer as I had a lot of help from a developer to do this. I'm not sure if this is the best way to do it but we also tried changing the .htaccess file without success so for us it was the best solution.