Page 1 of 1

Change the admin directory - security

Posted: Fri Nov 20, 2015 5:22 pm
by paulbaker
Had a surprise yesterday - someone accessed the login page of *cough* another CMS *cough* 10000 times:
Loads of hits
Loads of hits
(They didn't get in).

A great reminder that we should change the location of the admin directory for every CMSMS site. It's dead easy and means that people won't even be able to find the login page.

Just change the name of the admin directory and add this line to your config.php:

Code: Select all

$config['admin_dir'] = 'NewAdminDirectory';
Simple! :P

Re: Change the admin directory - security

Posted: Fri Nov 20, 2015 5:45 pm
by calguy1000
Yes, that is a great reminder.

And the new installation assistant (unlike in 1.x) will detect this automatically and remind you to change it back temporarily before upgrading.

Re: Change the admin directory - security

Posted: Fri Nov 20, 2015 6:46 pm
by paulbaker
That's even better ;)