Lack of interest Put Admin In Separate Directory

[Jafo]

Please put the admin.php in a directory that can be htaccess protected.. Really surprised that it is not.

 

[MentaL]

god bless beta.

 

[Shadab]

You can htaccess protect a single file as well.
A directory is not really needed.

See: http://webdesign.about.com/od/htaccess/ht/password_1_file.htm

 

[Hannah_M]

The way xenforo is coded (MVC) it won't make sence. There are ways like htaccess protecting it and such to fix it which will do just the same as separate directory.

 

[Carlos]

god bless beta.

By the power of god, consider it blessed!

 

[najaru]

maybe is possible to rename the admin.php....?

 

[Floris]

http://www.tools.dynamicdrive.com/password/

 

[projectego]

maybe is possible to rename the admin.php....?

It may be possible, but provided you can get the file protected via a .htaccess then you won't really need to bother with renaming the admin.php file.

 

[TNCclubman]

Just wanted to request if we can have the admin.php in its own folder? I like to add an extra layer of protection from hackers by password protecting my admin section.

Why is the admin.php in the root of the site? Is there a reason you guys dont have it in its own folder?

example root/admin/admin.php as opposed to root/admin.php

 

[Paul B]

Have you seen this post? http://xenforo.com/community/threads/changing-the-admin-url.8633/#post-119135

It's fairly easy to protect admin.php using .htaccess to restrict it to IP addresses and/or username & password.

 

[Shadab]

Is there a reason you guys don't have it in its own folder?

Is there a reason to move it to it's own folder? You can very well apply an extra layer of authentication (.htaccess/.htpasswd) to admin.php even if it's not in a separate directory.

Edit: :-|

 

[TNCclubman]

Is there a reason to move it to it's own folder? You can very well apply an extra layer of authentication (.htaccess/.htpasswd) to admin.php even if it's not in a separate directory.

Edit: :-|

im only familiar with doing that to a folder.

Please post details on how to do it with htaccess to a file.

 

[Paul B]

Please post details on how to do it with htaccess to a file.

http://xenforo.com/community/thread...access-for-added-protection.9341/#post-128079

 

[TNCclubman]

Thanks Brogan! Going to do that now.

 

[TNCclubman]

does this look correct? Im getting an internal server error when i upload it to root.

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^.*$ - [NC,L]
RewriteRule ^(data|js|styles|install) - [NC,L]
RewriteRule ^.*$ index.php [NC,L]
</IfModule>
Options +FollowSymLinks +SymLinksIfOwnerMatch
<Files admin.php>
AuthType Basic
AuthName "ACP"
AuthUserFile /home/httpd/vhostingsites/.htpasswd
Require valid-user
</Files>

 

[Vincent]

Try adding "" to AuthUserFile

 

[HannahP]

Adding auth doesn't make any sense to me. Two weak passwords are not better than one strong password, and two strong passwords are redundant and unnecessary.

 

[Vincent]

Adding auth doesn't make any sense to me. Two weak passwords are not better than one strong password, and two strong passwords are redundant and unnecessary.

And than we haven't spoken about how easy .htaccess is hackable...
Matey, if someone wants to be in your site and cracks the xF system, he will for sure crack your .htaccess one...

 

[Jaxel]

HTAuth doesn't work for me. It always says "page does not exist" when I go to admin.php.

 

[SneakyDave]

And the mod script, if one exists? Similar to vB's option in the configuration file?