Security Question
-
-
- Ryan West
- Jr. Rocketeer
- Posts: 37
- Thanks: 0
-
Is there a way to only allow logins to my domain, if it matches my cable modem address, since I have a non changing static?
Secondly, whats the feasability of renaming the administrator login page, to something other then domain.com/administrator
I would like to use some rotating cases character string, to make it obscure, so automated bots can't brute force guess my pw.....
any help = appreciated.
RYan.
-
-
-
- GollumX
- Elite Rocketeer
- Posts: 2817
- Thanks: 0
-
Yup just use .htaccess to deny access to the administrator directory. No need to change the administrator address.
Something like:Order Deny,Allow Deny from all Allow from XXX.XXX.XXX.XXX
Refer to the Joomla.org security FAQs for more info. - Say no to Internet Explorer 6.
twitter.com/mark_up
-
-
-
- Ryan West
- Jr. Rocketeer
- Posts: 37
- Thanks: 0
-
GollumX wrote:
Yup just use .htaccess to deny access to the administrator directory. No need to change the administrator address.
Something like:Order Deny,Allow Deny from all Allow from XXX.XXX.XXX.XXX
Refer to the Joomla.org security FAQs for more info.
so doing this, just affects logging into the administrator portion when adding that code sequence to the .htaccess file? and doesnt affect all users yes?
R.
-
-
-
- urj2ic8
- Hero Rocketeer
- Posts: 421
- Thanks: 0
-
Ryan West wrote:
GollumX wrote:Yup just use .htaccess to deny access to the administrator directory. No need to change the administrator address.
Something like:Order Deny,Allow Deny from all Allow from XXX.XXX.XXX.XXX
Refer to the Joomla.org security FAQs for more info.
so doing this, just affects logging into the administrator portion when adding that code sequence to the .htaccess file? and doesnt affect all users yes?
R.
if you place the .htaccess file in the administrator directory then yes. - Billy Zoellers
-
-
-
- GollumX
- Elite Rocketeer
- Posts: 2817
- Thanks: 0
-
The disadvantage of this method is that you won't be able to administer your website from anywhere but home.
An alternative to this method uses the htaccess file to password protect the directory, so you can access the admin logon page from anywhere, so long as you enter the htaccess password. Google. it, there are thousands of websites explaining the method.
You can avoid both methods by just using an admin password that bots can't crack like hY_6bVkW#dM - Say no to Internet Explorer 6.
twitter.com/mark_up
-
-
-
- Bob Ateah
- Elite Rocketeer
- Posts: 4521
- Thanks: 0
-
GollumX wrote:
You can avoid both methods by just using an admin password that bots can't crack like hY_6bVkW#dM
Bingo!
All good advice GollumX! - The member formerly known as Roland Deschain
After your question is solved, please Edit your original post and choose the Solved message icon, thank you!
-
Time to create page: 0.078 seconds