Lack of interest Put Admin In Separate Directory

[Jafo]

Please put the admin.php in a directory that can be htaccess protected.. Really surprised that it is not.

 

[Paul B]

Presumably this is related to security?

Just in case you're not aware, you can restrict access to admin.php using .htaccess:
http://xenforo.com/community/threads/changing-the-admin-url.8633/#post-119135

 

[SneakyDave]

Yes, but I'm not using apache at the moment, otherwise I would use that

 

[CTXMedia]

Just wondered how easy it would be to move admin.php to its own sub-directory so that it can be separately protected by its own .htaccess file without having to mess with the main root .htaccess file (which usually contain redirects etc.)

If the path is pretty well hard-coded into XF then forget it - it'll be too much work, but if not is it worth considering a move?

Cheers,
Shaun

 

[Robbo]

Looks fairly well hardcoded to me.

 

[CTXMedia]

Looks fairly well hardcoded to me.

Fair enough, that's what I suspected anyway, but just wanted to get the suggestion out there ...

What about an update later on in XF's life to add the ACP location as a variable in the config file and reference the config value so there's some flexibility to move it around (if you want/need to)?

 

[Jake Bunce]

It's not hard:

http://xenforo.com/community/threads/changing-the-admin-url.8633/#post-119083

That code affects all admin links except for one in the templates for the moderator bar.

 

[Robbo]

Looking at that post and since the ACP requires javascript might be a better solution to just inject a script at the end of the body js template that goes throughand changes all the anchors etc.

Another option which is a bit like what I do is making admin.php redirect to the real area.