FelixT Posted March 18, 2022 Share Posted March 18, 2022 Could you please help? ... May i know How to hide .............../admin to public? Regards, Link to comment Share on other sites More sharing options...
Donnie95 Posted March 20, 2022 Share Posted March 20, 2022 I don't know how to hide it but you can use Cloudflare firewall rules to protect it. For example you can create a rule to only allow your IP or ISP to access the /admin/ url. This will make it very hard for attacker to hack your website. FelixT 1 Link to comment Share on other sites More sharing options...
Miss_B Posted March 20, 2022 Share Posted March 20, 2022 On 3/18/2022 at 4:19 PM, FelixT said: Could you please help? ... May i know How to hide .............../admin to public? Regards, What do you mean by hiding admin to public? Are you worried about the security? If so, you can use the required multi factor authentication to access the Admin Panel. FelixT 1 Link to comment Share on other sites More sharing options...
Square Wheels Posted March 20, 2022 Share Posted March 20, 2022 You can also rename it. FelixT 1 Link to comment Share on other sites More sharing options...
Chris Anderson Posted March 21, 2022 Share Posted March 21, 2022 Check out the following guide: You can add the following to your constants.php file: Constant - CP_DIRECTORY Use - Name of your admin CP directory when changed from the default of 'admin' Example value - 'newcpdirectory' FelixT 1 Link to comment Share on other sites More sharing options...
DawPi Posted March 21, 2022 Share Posted March 21, 2022 Or even protect it via htaccess too: https://www.askapache.com/online-tools/htpasswd-generator/ FelixT and Egorkin 1 1 Link to comment Share on other sites More sharing options...
FelixT Posted March 28, 2022 Author Share Posted March 28, 2022 On 3/21/2022 at 8:07 AM, Chris Anderson said: Check out the following guide: You can add the following to your constants.php file: Constant - CP_DIRECTORY Use - Name of your admin CP directory when changed from the default of 'admin' Example value - 'newcpdirectory' Thank you so much for your info and help.....will try that. Link to comment Share on other sites More sharing options...
Sonya* Posted March 28, 2022 Share Posted March 28, 2022 CP_DIRECTORY is deprecated //-------------------------------------------------------------------------------------- // DEPRECATED OPTIONS: CHANGE AT YOUR OWN RISK // These constants were once customisable but their fucntionality should now be // considered deprecated. // AdminCP Obscurity Settings // It was once recommended for site owners to rename the directory for security // and set the CP_DIRECTORY constant so some links still work, the upgrader can put // files in the right place, etc. While it is still honoured, it is no longer recommended // as much more secure alternatives like two factor authentication now exist. 'CP_DIRECTORY' => 'admin', // The name of the directory where the AdminCP is Link to comment Share on other sites More sharing options...
Mark H Posted March 28, 2022 Share Posted March 28, 2022 Sonya is correct. While renaming the admin folder is still possible at this time, the option to do so will be removed in an upcoming release, so please plan accordingly. We strongly recommend using 2FA for anyone that has ACP access. Link to comment Share on other sites More sharing options...
Egorkin Posted Sunday at 05:19 PM Share Posted Sunday at 05:19 PM On 3/29/2022 at 12:32 AM, Mark H said: We strongly recommend using 2FA I tried the security questions. A very strange thing! I didn't understand how this would secure the account 🤔 Link to comment Share on other sites More sharing options...
Randy Calvert Posted Sunday at 05:49 PM Share Posted Sunday at 05:49 PM 22 minutes ago, Egorkin said: I tried the security questions. A very strange thing! I didn't understand how this would secure the account 🤔 It adds another layer an attacker must overcome. Here’s a scenario in which this defense would prevent: A rather large number of people use the same usernames and passwords across multiple sites. If I get a list of credentials from another compromised site, I could try them on other sites like yours and because you used the same credentials… I now have access to your account without actually hacking your site/server/IPB instance. However with another set of questions, it’s much more likely the attacker would not have access to those as well and would be stopped. (It’s possible they could if they were targeting you specifically and had lots of info on you but it would stop those “attacks of opportunity”.) Now… it’s not as secure as something like having a 2FA implemented, but it’s better than nothing! Link to comment Share on other sites More sharing options...
Egorkin Posted Sunday at 06:16 PM Share Posted Sunday at 06:16 PM Why didn't the IPB authors make sure that each user came up with individual questions for himself? Link to comment Share on other sites More sharing options...
Jim M Posted Sunday at 06:35 PM Share Posted Sunday at 06:35 PM 18 minutes ago, Egorkin said: Why didn't the IPB authors make sure that each user came up with individual questions for himself? You can select from a list or make your own questions. The user would select a question and insert their own answer. Link to comment Share on other sites More sharing options...
Egorkin Posted Sunday at 06:36 PM Share Posted Sunday at 06:36 PM I'm making up a list of questions. And each user gives their own answer. Right? Link to comment Share on other sites More sharing options...
Jim M Posted Sunday at 06:40 PM Share Posted Sunday at 06:40 PM 3 minutes ago, Egorkin said: I'm making up a list of questions. And each user gives their own answer. Right? Yes. Users would supply their own answers, that is what makes it secure 🙂. Link to comment Share on other sites More sharing options...
Egorkin Posted Sunday at 06:51 PM Share Posted Sunday at 06:51 PM 10 minutes ago, Jim M said: Yes. And that's cool! I'll try it today, thanks! 👍 Link to comment Share on other sites More sharing options...
Randy Calvert Posted Sunday at 06:52 PM Share Posted Sunday at 06:52 PM In addition, I would recommend asking unique questions… don’t use “what street did you grow up on?” for example. Generic questions can sometimes be figured out from looking at social media or other places. Egorkin 1 Link to comment Share on other sites More sharing options...
Egorkin Posted Sunday at 07:27 PM Share Posted Sunday at 07:27 PM Yes, asking "What is the name of the UK capital?" it would be strange 🤣 Randy Calvert 1 Link to comment Share on other sites More sharing options...
Recommended Posts