How do you PROTECT files ** Stop anyone going on ADMIN

[zakaria666]

Hello

I want to know if there is any way of stopping another user from typing http://www.mysite.com/4images/admin

and then getting the admin screen. ??

Thanks alot

[V@no]

There is no reason restrict users from accessing that page, because without proper administrator username/password they wont go further login screen.

[zakaria666]

Thank you sir for your prompt reply

You are correct but the problem is, the website i have is garunteed to experience alot of hacks garunteed. I promise you that, and there are amazingly smart people out there who will not stop until they succeed, hence why i want to protect the admin folder and any other part i believe may be vulnerable. its messed up that i actually have to do this but i have protect myself from loosers out there who will without a doubt not sleep until my website is hacked. And like i said, i know a fact it will come to that.

any advice sir??

thank you

[Nicky]

okay.. then let them 1st to hack this: http://tools.dynamicdrive.com/password/
example: http://tools.dynamicdrive.com/password/example/

[zakaria666]

Thank you so much for your reply,

Please forgive me as i am a novice to this. I dont think i have a htapsswrd on my server...

Please do forgive me, Can you break it down to me in exactly what i do step by step as the site you gave me presumes i know what i am suppose to do but i have no idea. im so sorry sir do forgive me for asking alot of quesitons. But what sort of files should i protect with this, obviously i cannot do the whole site other noone could be allowed in but the admin area for one but how.

god bless u sir and all the other employees of 4images for there proffesionalism

[V@no]

Step-by-step is well explained on that site. Just try it.

[zakaria666]

Hello sir,

I wondered would it cause an issue if i changed the folder admin name, to for example (secret), so instead of www.example.com/4images/admin   

its

www.example.com/4images/secret????

thank you

[V@no]

Nothing will work if you do that. /admin/ path is hard coded into 4images.

You can always restrict that directory to specific IP addresses (though it wont work if your IP is dynamic)

[zakaria666]

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, webmaster@globalkurd.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.



________________

The above is teh error i am getting using what you have told me to use, it doesnt seemto work im screwed

[V@no]

you'll need server's error logs in order to learn what went wrong and how to fix it.
Any way, If someone be able hack your 4images, sure enough they will be able hack this kind of protection even easier, so IMO you are wasting your time with this.

[zakaria666]

I guess your right  

But please dont say it like that   i bought from you guys with confidence it was hack proof. I mean the least i can do is give the loosers a hard enough time to hack it and not make it easy on them. Apart from the hacks in the past via the plugins (wordpress) has there been any other incidents where there have been hacks that people have told u about?

 

[V@no]

The only incidents possible if 4images not patched or if a security hole newly discovered and unknown to us (yet)

[zakaria666]

Does your software offer any brute force protection or time outs sir??

also i dont know if i may have offended you or up set you but you havent replied sir to this topic. Please forgive me if i have and i sincerely apologize

Topic: ** How do you add categories to user groups???? 

[V@no]

By default 4images doesn't provide any such protection as it's just a gallery and not online banking site...But with enough PHP knowledge such protection could be implemented.

As of being offended - not at all, just answering only when have free time