Skip to content
Grav 2.0 is officially stable. Read the announcement →
Archive

Htpasswd for admin-plugin?

Started by Muut Archive 9 years ago · 3 replies · 524 views
9 years ago

Is there a way to secure the /admin url with htpasswd?

Since 'admin' is not a folder in the file system I can't drop a .htaccess/.htpasswd file there...

In the documentation there is a description how to rename the /admin slug. Is this the only way to make the admin plugin more secure?

9 years ago

I have not tried using an apache protected area, but for example you can allow access only from your IP adding in your .htaccess:

TXT
<files admin>
    order deny,allow
    deny from all
    allow from your-ip-address
</files>
9 years ago

@flaviocopes
Since my IP changes it's not a solution for my case.

Would you say changing the 'admin' slug is secure enough?

9 years ago

I guess it depends on your slug... At least 8 characters maybe: 1aD-*nY7

Suggested topics

Topic Participants Replies Views Activity
Archive · by Deleted User, 9 years ago
0 1336 9 years ago
Archive · by Muut Archive, 9 years ago
2 926 9 years ago
Archive · by Muut Archive, 9 years ago
2 4056 9 years ago
Archive · by Muut Archive, 9 years ago
1 2941 9 years ago
Archive · by Muut Archive, 9 years ago
3 1112 9 years ago