MNslappy,
Authentication for osCommerce is set up using Apache authorization. We found that there were some accounts on our system that did not have that put on place correctly through the install in the Site Manager, so we have put a fix in place for that. Your osCommerce admin should be secure now.