renaming the /manager directory would this cause any issues?

Quote from: Revolver at Oct 21, 2008, 09:43 AM

Quote from: sinbad at Oct 21, 2008, 08:45 AM

would’nt enabling the capacha on default in site configuration under the manager will add some security for that issue?
I mean before they can brute force your login info they’ll need also to put the correct capacha.

how did you put the security code there?

I think he mentions it somewhat in his post

Tools-->Configuration-->User-->use CAPTCHA  codes

Quote from: Mproject at Oct 21, 2008, 09:22 AM

Quote from: sinbad at Oct 21, 2008, 08:45 AM

would’nt enabling the capacha on default in site configuration under the manager will add some security for that issue?
I mean before they can brute force your login info they’ll need also to put the correct capacha.

which file did you modify to change the manager login area?

if u didn’t change the manager theme it’s under manager/media/style/MODxLight/login.html

On most apache hosts you can also set the .htaccess file only allow access to the /manager/ from a single or range of IP addresses

Note that the "deny from all" treatment will break the CAPTCHA. Check this thread for a way to deny manager access to all but specific IPs without breaking CAPTCHA.