Should The iadmin directory be password protected?

[kwalker]

Hello all,

 

I was wondering if it's a good idea to password protect the whole /iadmin/ directory or should the index.php file be protected?

 

It's working fine on my end, but I'm not sure if it's going to cause some pages/functions to not work correctly because of that.

 

Thank you all for your valued time.

 

Kevin

[jayson]

I password protected my whole ADMIN folder it works fine, no problems

 

http://www.jaysarahandy.com/rondo/store/ca...admin/index.php

[kwalker]

Thanks Jay,

 

I was working while I've protected it and everything seems ok, and working fine. Just wanted to be sure.

 

Thanks for your input.

 

Kevin

[GraphicsGuy]

Just for the record, the whole admin folder should be password protected. Otherwise, it would be possible for someone to tweak the url to call the specific functions of the admin, bypassing the index.php file.

[jayson]

What he said, it would be easy to do a function without hitting the index.php file, and then there goes your whole site

[kwalker]

We can't allow that to happen.

 

Thank you all for your input and advice.

 

Kevin