Change the admin directory - security

[paulbaker]

Had a surprise yesterday - someone accessed the login page of *cough* another CMS *cough* 10000 times:

Loads of hits

(They didn't get in).

A great reminder that we should change the location of the admin directory for every CMSMS site. It's dead easy and means that people won't even be able to find the login page.

Just change the name of the admin directory and add this line to your config.php:

Code: Select all

$config['admin_dir'] = 'NewAdminDirectory';

Simple!

[calguy1000]

Yes, that is a great reminder.

And the new installation assistant (unlike in 1.x) will detect this automatically and remind you to change it back temporarily before upgrading.

[paulbaker]

That's even better