Admin Protection

[wim]

Does the application require the ADMIN-files to be present at all times ?

 

If not, is deleting it and FTP it back in place only when you're online yourself, not the best solution of all ?

 

Let'm look for something that's simply not even there.

 

When you need to look into it and work it, you zip out your (admin) tool and leave it out there only as long as you need it.

 

The above thought developed after I locked myself out umptiest times trying to install the .htaccess thing from a different platform....

 

W

[AlanR]

That would really be a pain in the butt.

 

What are you going to do? ftp it in avery time you want to check an order?

 

Just name it something obscure or misleading and put it outside the catalog directory.

 

Something like images/babypics

[detsouvalas]

Does the application require the ADMIN-files to be present at all times ?

 

If not, is deleting it and FTP it back in place only when you're online yourself, not the best solution of all ?

 

Your idea lucks unfortunately of usability! :(

 

Running an e-shop requires from you that you check it relatively often, so ftping the whole administration area everytime you need to check something is too complicated!

 

There are easier steps to protect your admin area:

 

- Change as much directory names as you can,

- Password protect it with .htaccess,

- Password protect it with a specialized contribution,

- Put your configure.php files outside of the server root.

- I also think having read somewhere that you can install the admin area on a different server then the one where the shop is!

 

I think it's easier and secure enough!