Hide administration

Is it possible to hide the administration area and if yes what's the best way thanks .

Thanks.

what do you mean hide the administration area?

I mean i don't want no one to know that my admin area is http://xxxxxxx.com/administration/ so is it possible to change it or what ever work ?

Thank

I don't see why you can't rename the administration folder and update your header.inc.php $admin_dir to the new folder name.

Try and that and let us know if it works!

Good advice. That should actually be one of the first things for all of us to do. Try naming it to something obscure and unrelated to admin.

ok step by step :

1-I changed the administration to the name i want xxxxxx ok

2-i did go to folder INC and i did open header.inc.php then line 34 i got this ----> global $admin_dir;

My question is how am going to update that name ?

Please step by step thanks .

Eli

I'm looking through the code and post-install (not sure about pre-install variables) you will need to change more than the header.inc.php

inc\header.inc.php  around line 152, a href="administration/modules.php"> must be changed to new admin direcotry

BxDolFilesModule.php around line 140, you will need to change "administration/home" to the new admin direcotry; right below that you will need to change "administration/settings" to the new admin direcotry

BxDolFilesTemplate.php;  around 238,  you will need to chanage 'users_processing' => BX_DOL_URL_ROOT . $this->_oConfig->getBaseUri() . 'administration/',   to new admin directory

BxDolTwigModule.php around line 1165         $this->_addForm(BX_DOL_URL_ROOT . $this->_oConfig->getBaseUri() . 'administration/admin_entries');    need new admin direcotry

......

bascially in every class module you will need to go into the php and change the setting to the administration directory for the module.  If you do not then it may not appear correctly in the admin>modules > settings to change stuff

Can we get a ticket on this, all these modules should pull the administration directory recursive to whatever is in the headers.inc.php file for the admin direcotry.

Do a search in there for the whole word 'administration'.  That will point you to where you update that variable.

so now you tell me better don't try to change it lol because it may take me longer and it may confuse me right !

But why so complicated ! Shoud be a module that can do all this job !

I used befor Joomla there was a module that can do it for you no hassle , free module .

Eli .

I think it would be better to open a ticket .

Thanks .

Eli .

Ticket added: http://www.boonex.com/trac/dolphin/ticket/1419

Thanks Michel, this really is an important security feature to have.  Since anyone can figure out from default installation what your admin section will be located, it is only natural to want to change it but not to have to manually change every module file to enhance such security.

You are welcome mauricecano ;-) But I have to say that you and some other Unity members are doing the most difficult part of the work: to spend lot of time to test and report bugs or make smart suggestions. My contribution is not so difficult... check the bug if I can and open a new ticket is quite easy :-)

Please don't mix site administration login form with administration url of exact module.

Could you please be more explicit ?

Do we have just to change the Admin folder name and edit inc/header.inc.php ?

For me i will be better waiting for a module or an easy way to do it or at least a working tutorial for it .

But i think it's a must to hide the administration area !

Eli.

Looking more at it maybe he's saying that the urls located in the classes are not absolute for the administration home page but part of the url masking.

I'm testing out changing the admin folder to frank and only changing the headers.inc.  It appears to be working and letting me make all changes and saving those changes. 

headers.incc must be updated with the new admin folder name or else the site will believe whatever folder you rename it to is a a profile. 

Interesting to note that if you change the administration folder name and change headers.inc., if you try to go to www.yoursite.com/administration it spits out Warning: Cannot modify header information - headers already sent by (output started at /public_html/templates/base/scripts/BxBaseProfileView.php:2199) in /public_html/inc/design.inc.php on line 133.  Not somethign I would call a problematic bug unless you want someone naming their profile administration ( which you shouldn't want)

MichelSwiss you're our voice!

In this last period we spend time to test and post in forum if we find bug and even the solution but no other people open ticket for bug...only you!

It's important to test and find bug but it's equally important to report it in TRAC!

Thanks for all!

A little off-topic, but I too second Luca's statement. You're up for the Bug Awards, Michel....

Thank you ;-)

A special thank to mauricecano for his explanation about Administration's name change ;-) I think that's now clear for everybody :-)

And thank you AlexT and Sasha for your patience. Sorry if sometimes I open wrong tickets because I didn't understand the way the script is working ;-)

Just out of curiosity, can't we just throw in a .htaccess file under the administration folder and make the whole section password-protected. Then we don't need to worry about name changes etc...

What do you say?

By the way .. there is no need to hide administration login form in D7.0  .. because since D7.0 admin is regular user but with more permissions .. and it is possible to login under admin using regular login form from user part...

It makes sense to hide whole administration folder using .htaccess file for example.. then if somebody gets your admin password and login to the site from user login form .. he still will not be able to get into administration folder .. since it is protected with another user /password  .. or access is allowed from particular IPs only.

Thank you Alex :-)