Changing the admin URL?

[Ryan McAdams]

Do any of you know how to possibly change the admin URL?

 

[Dean]

Do you mean the location of
www.yoursite.com/admin.php
?

 

[Ryan McAdams]

Do you mean the location of
www.yoursite.com/admin.php
?

yes sir

 

[Dean]

My mind is a bit fuzzy at the moment. Perhaps someone else?

 

[Jake Bunce]

That is not a configurable option in the software.

What is your reason for wanting to change it? Maybe I can offer a different solution. For example, URL rewrites can allow you to alias a particular URL:

http://www.addedbytes.com/for-beginners/url-rewriting-for-beginners/

 

[Ryan McAdams]

That is not a configurable option in the software.

What is your reason for wanting to change it? Maybe I can offer a different solution. For example, URL rewrites can allow you to alias a particular URL:

http://www.addedbytes.com/for-beginners/url-rewriting-for-beginners/

I want to hide it. I dont want it to be a publicly known URL.

 

[Netsultants]

This is a security measure suggested by another forum sw.

 

[Jake Bunce]

Ok. This requires getting into the code. This is the relevant code:

library/XenForo/Link.php

	public static function buildAdminLink($type, $data = null, array $extraParams = array())
	{
		$type = self::_checkForFullLink($type, $fullLink, $fullLinkPrefix);

		$link = self::_buildLink('admin', $type, $data, $extraParams);
		$queryString = self::buildQueryString($extraParams);

		if ($queryString !== '' && $link !== '')
		{
			$append = $link . '&' . $queryString;
		}
		else
		{
			// 1 or neither of these has content
			$append = $link . $queryString;
		}

		if (($hashPos = strpos($type, '#')) !== false)
		{
			$append .= substr($type, $hashPos);
		}

		$outputLink = 'admin.php' . ($append !== '' ? '?' : '') . $append;
		if ($fullLink)
		{
			$outputLink = $fullLinkPrefix . $outputLink;
		}

		return $outputLink;
	}

You can see this line in there which specifies the file name:

$outputLink = 'admin.php' . ($append !== '' ? '?' : '') . $append;

If you change the file name here and then rename the file on your server then that will change the location of the Admin CP.

If you post a request in this forum then maybe some one can make an addon for this so you don't have to edit the files.

 

[Ryan McAdams]

This is a security measure suggested by another forum sw.

Ya.. but regardless of software at all this is a good best practice.

 

[Forsaken]

Ya.. but regardless of software at all this is a good best practice.

Obscuring the URL will not stop someone from accessing your admin panel, as they would have already brute forced the pass, or they would have gained it some other way.

And unless you're intending to change the link in the moderation bar, they'd still know the URL in the end.

Using htaccess to secure the file, or limiting it to your IP only is more secure than changing the file name/location.

 

[Paul B]

You can always use .htaccess as Forsaken has suggested.

Set up the password file using cPanel and then enter this in your .htaccess file:

<Files admin.php>
AuthType Basic
AuthName "ACP"
AuthUserFile "path to passwd file"
Require valid-user
</Files>

Change path to passwd file to the actual password file path.

If you want to limit it to your IP address then use this:

<Files admin.php>
Order Deny,Allow
Deny from all
Allow from 127.0.0.1
</Files>

Change 127.0.0.1 to your IP address.

 

[dono]

@brogan

The requested page could not be found.

I used

<Files admin.php>
AuthType Basic
AuthName "ACP"
AuthUserFile "/www/.htpasswd"
Require valid-user
</Files>

using cPanel.. any idea ?

 

[Paul B]

I can only assume the path to your password file is incorrect.

For reference, mine looks something like this:
AuthUserFile "/home/domain/.htpasswds/public_html/forum/passwd"

 

[Slink]

Do any of you know how to possibly change the admin URL?

Its easy.
Just change your admin.php to anyname.php

Now go to

/library/XenForo/Link.php

And find the following line

$outputLink = 'admin.php' . ($append !== '' ? '?' : '') . $append;

And change the 'admin.php' to 'anyname.php' .

And you are done.
Give me feedback. Is this worked for you?

 

[kushal]

Its easy.
Just change your admin.php to anyname.php

Now go to

/library/XenForo/Link.php

And find the following line

$outputLink = 'admin.php' . ($append !== '' ? '?' : '') . $append;

And change the 'admin.php' to 'anyname.php' .

And you are done.
Give me feedback. Is this worked for you?

sad in my library there is no XenForo folder

 

[TPerry]

sad in my library there is no XenForo folder

Got a feeling that he may be referencing the 1.x codebase.

On my install, it shows to be in the root at /src/XF/Legacy/Link.php.

 

[kushal]

Got a feeling that he may be referencing the 1.x codebase.

On my install, it shows to be in the root at /src/XF/Legacy/Link.php.

yes you are right but there is no admin.php like that acodding him





<?php

namespace XF\Legacy;

class Link
{
public static function buildPublicLink($type, $data = null, array $extraParams = [])
{
$app = \XF::app();

/** @var \XF\Mvc\Router $router */
$router = $app['router.public'];
return $router->buildLink($type, $data, $extraParams);
}

public static function buildAdminLink($type, $data = null, array $extraParams = [])
{
$app = \XF::app();

/** @var \XF\Mvc\Router $router */
$router = $app['router.admin'];
return $router->buildLink($type, $data, $extraParams);
}
}

 

[Baby Community]

I want to hide it. I dont want it to be a publicly known URL.

xenforo is the most reliable system in the world. You don't need to change it after you activate the two-step password authentication as well.

 

[TPerry]

yes you are right but there is no admin.php like that acodding him

If it's a 1.x code base legacy... then yes, locations can have changed...
as to admin.php... yes, there IS clearly an admin.php located in the root directory.



There is also a Legacy Link.php file in /_legacy/library/XenForo/





Once more... sometimes one has to do some investigation/research on their own. Not everything can be handed to one on a platter all the time.

 

[kushal]

xenforo is the most reliable system in the world. You don't need to change it after you activate the two-step password authentication as well.

yes may be you right . but i dont want unwanted users open my admin.php . its will be private