I'm looking to redirect and protecting URL of my Admin page -help

Discussion in 'Security' started by 12Way, Mar 16, 2009.

  1. #1
    how do I redirect my admin URL of my website, to the Home page (or anypage), to make sure other IP addresses and computers cannot know my Admin website URL if they were to type it in the Searches?
     
    12Way, Mar 16, 2009 IP
  2. boompie

    boompie Peon

    Messages:
    17
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I'd just keep things simple and create a folder with a semi-random name, like Admin1234.
    Then protect it with .htaccess and .htpasswd.

    Carl
     
    boompie, Mar 16, 2009 IP
  3. Ladadadada

    Ladadadada Peon

    Messages:
    382
    Likes Received:
    36
    Best Answers:
    0
    Trophy Points:
    0
    #3
    What you want (and what boompie is talking about with .htpasswd) is HTTP authentication.

    The Apache documentation is here: HTTP authentication in Apache 2.0

    Make sure that no one can request your .htpasswd file using a web browser or they will be able to figure out your password. The easiest way to manage this is to make sure it is not in a web-accessible directory.

    You can tell Apache to authenticate based in IP addresses but I would not recommend it. IP addresses are easily spoofed and are not considered "secret". It would not be easy to get access to your admin directory this way but it would be possible and probably easier than the password method. To make the password version even harder to break into, use SSL. You can set up a self-signed certificate and then your password will be encrypted when traveling across the internet as well.
     
    Ladadadada, Mar 17, 2009 IP
  4. MH-Andy

    MH-Andy Peon

    Messages:
    30
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Just make sure the admin panel is something random that no one else would know for example /admincp123/ and a simple .htaccess password would prevent bots and humans from scanning your admin directory.
     
    MH-Andy, Mar 20, 2009 IP