Secure your Admin Control Panel

**markblair** · 09-08-2006, 04:28 AM

In the past I was a moderator at a forum that did this and I got the idea from there. As soon as I started my forum, I made sure this was one of the first changes that I made. I password protect the 'admincp' and 'modcp' directories from within cPanel. Even though you have to log into the AdminCP with your forum password, it still adds an extra layer of security by having the directory itself password protected. This way there really are two passwords to enter to get to the part of the forum that could let a hacker have tons of fun at your expense.

I'm sure this can be done for other forum software as well since it is controlled by the website control panel and not the specific forum software like vBulletin, phpbb, etc. I highly recommend everyone does something like this. It might mean remembering yet another password but then hopefully we would see less topics about forums being hacked.

**BamaStangGuy** · 09-08-2006, 04:48 AM

I used to do this but when I changed servers I never put it back up. I guess I should.

This is an excellent tip

**Get Shorty** · 09-08-2006, 04:54 AM

I also change the path to both control panels.

http://forum.alcoholreport.com/admincp doesn't work.

**IMPAQ** · 09-08-2006, 05:01 AM

Great tip. I'm going to get this set up.

**BamaStangGuy** · 09-08-2006, 05:02 AM

Quote:

Originally Posted by Get Shorty

I also change the path to both control panels.

http://forum.alcoholreport.com/admincp doesn't work.

I do that to my Mustang forum. It's actually a pretty funny name too

**markblair** · 09-08-2006, 05:06 AM

Quote:

Originally Posted by Get Shorty

I also change the path to both control panels.

http://forum.alcoholreport.com/admincp doesn't work.

Another great idea.

I'm glad that everyone likes this. It really should be a necessity for any forum.

**Harlzard** · 09-09-2006, 02:39 AM

On my forum, the link that leads to the admincp is changed, so if you click it you just get the page cannot be displayed. you have to type the url in the browser and put whatever name you changed instead of admincp.

**Jolteon** · 09-09-2006, 02:42 AM

Quote:

Originally Posted by Harlzard

On my forum, the link that leads to the admincp is changed, so if you click it you just get the page cannot be displayed. you have to type the url in the browser and put whatever name you changed instead of admincp.

Thats a good one!

**markblair** · 09-09-2006, 05:02 AM

Quote:

Originally Posted by Harlzard

On my forum, the link that leads to the admincp is changed, so if you click it you just get the page cannot be displayed. you have to type the url in the browser and put whatever name you changed instead of admincp.

If you were using vBulletin that would be unnecessary since the AdminCP link only shows up for any admins that are logged in. Spiders, guests, and regular members will never see that link. Not sure how IPB works though. Might be something they should change for the future.

**Harlzard** · 09-09-2006, 05:14 AM

Quote:

Originally Posted by markblair

If you were using vBulletin that would be unnecessary since the AdminCP link only shows up for any admins that are logged in. Spiders, guests, and regular members will never see that link. Not sure how IPB works though. Might be something they should change for the future.

The admincp link on IPB is only visible to admin too. But, if your password was cracked on your forum then they could access the admin cp. So if you change the url to the admincp, but leave it as 'admincp' on the forum, they can't get to it.

this is like for the hackers who can crack passwords and somehow get into the admin cp.

09-08-2006, 04:28 AM	#1
markblair Forum Addict Join Date: Oct 2005 Location: Michigan Posts: 1,956	Secure your Admin Control Panel In the past I was a moderator at a forum that did this and I got the idea from there. As soon as I started my forum, I made sure this was one of the first changes that I made. I password protect the 'admincp' and 'modcp' directories from within cPanel. Even though you have to log into the AdminCP with your forum password, it still adds an extra layer of security by having the directory itself password protected. This way there really are two passwords to enter to get to the part of the forum that could let a hacker have tons of fun at your expense. I'm sure this can be done for other forum software as well since it is controlled by the website control panel and not the specific forum software like vBulletin, phpbb, etc. I highly recommend everyone does something like this. It might mean remembering yet another password but then hopefully we would see less topics about forums being hacked. __________________ Mark Blair To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. - "Where Professionals Discuss Web Hosting"

09-08-2006, 04:48 AM	#2
BamaStangGuy Forum Enthusiast Join Date: Sep 2005 Location: Alabama Posts: 2,483	I used to do this but when I changed servers I never put it back up. I guess I should. This is an excellent tip __________________ *To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.* More to be listed soon.

09-08-2006, 04:54 AM	#3
Get Shorty Forum Addict Join Date: Jul 2006 Location: Baton Rouge, LA Posts: 1,435	I also change the path to both control panels. http://forum.alcoholreport.com/admincp doesn't work. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

09-08-2006, 05:01 AM	#4
IMPAQ Veteran Join Date: Mar 2006 Location: Richmond, VA Posts: 519	Great tip. I'm going to get this set up. __________________ To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. - Parent-to-Parent discussion forums

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

09-09-2006, 02:39 AM	#7
Harlzard Forum Addict Join Date: Jan 2006 Location: Australia Posts: 1,925	On my forum, the link that leads to the admincp is changed, so if you click it you just get the page cannot be displayed. you have to type the url in the browser and put whatever name you changed instead of admincp.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Google Adsense has updated their control panel	BamaStangGuy	Revenue and Advertising	3	03-02-2006 06:06 AM
wtcBB Software	Shelley	Software	0	09-19-2005 10:33 PM