renaming the /manager directory would this cause any issues?

Hi guys

just wondering is it possible if i rename the /manager directory? would this cause any issues?

Reason: Would like to rename this folder so that no one else will discover this page and try to brute force attack the login page.

just wondering is it possible if i rename the /manager directory? would this cause any issues?

Wow...I would imagine you would have to quite a lot of lines of code in the snippets and such...I can’t imagine it would be something that could be done very easily...but I could be wrong.

Quote from: flinx at Oct 20, 2008, 09:01 PM

just wondering is it possible if i rename the /manager directory? would this cause any issues?

Wow...I would imagine you would have to quite a lot of lines of code in the snippets and such...I can’t imagine it would be something that could be done very easily...but I could be wrong.

Thats what I would like to know is /manager directory hard coded within the php source code? or it does not matter what I rename /manager to, it just sees /manager directory as the root?

Better still isn’t there a easier way to stop people from trying to brute force the login page?

Not in 096x (it is hard coded, and we know that’s not smart!). Revolution, yes, name it whatever you so desire.

It might make it into Evolution (same code base as 096x) but that’s not determined yet.

Quote from: rthrash at Oct 20, 2008, 09:30 PM

Not in 096x (it is hard coded, and we know that’s not smart!). Revolution, yes, name it whatever you so desire.

It might make it into Evolution (same code base as 096x) but that’s not determined yet.

Sorry what does that mean?

Hard coding it is indeed not smart, but if its currently hard coded, i guess I’m stuck! (can not rename it, will have to suffer).
So how do you stop crackers? implement anti-bot feature?

Personally, I’ve not run into brute force attempts on any sites, but that doesn’t mean it won’t happen to you.

In the 096x and likely in the Evo releases, "manager/" is hard coded. You can specify the manager directory in Revolution now, but Revo is in alpha.

Along those same lines. Is it safe to change just the name of the admin user after the install?

For someone worried about brute force attacks, frequent changes of the name and password might be a comfort.

Using a long random string for both and changing them often, would make a brute force attack impractical, especially when combined with the lockout after too many failed attempts.

would’nt enabling the capacha on default in site configuration under the manager will add some security for that issue?
I mean before they can brute force your login info they’ll need also to put the correct capacha.

Quote from: sinbad at Oct 21, 2008, 08:45 AM

would’nt enabling the capacha on default in site configuration under the manager will add some security for that issue?
I mean before they can brute force your login info they’ll need also to put the correct capacha.

which file did you modify to change the manager login area?

Quote from: sinbad at Oct 21, 2008, 08:45 AM

would’nt enabling the capacha on default in site configuration under the manager will add some security for that issue?
I mean before they can brute force your login info they’ll need also to put the correct capacha.

how did you put the security code there?