Protect your Admin Directory with htpasswd

[Paul H.]

This tutorial will show you how to add the best layer of security to your admin directory that you possibly can: Apache htpasswd.

To start, log into cPanel, and find the Security Section. Click "Password Protect Directories"



On the next page, click the directory you want to protect.

Next, enter in the user and password information. Be sure to click the "Password protect this directory" checkbox.



Click "Add/modify authorized user".

Tada!

[TheGarfield]

I use this for a long time now, I've also protected 'inc/' folder, you know, there are some plugins there and we never know what those plugins contain...

[Nathan Malcolm]

I use this for a long time now, I've also protected 'inc/' folder, you know, there are some plugins there and we never know what those plugins contain...

As plugins hook onto the core system and aren't directly executable, that isn't necessary.

[crazy4cs]

This user has been denied support.

I use this as well, IMO the one of the best protection one can ever get.

[John J.]

This user has been denied support.

Good!, Thanks for sharing this information.

[FooFighter]

So when I access the acp I would have to...

- enter my forum username/password
- enter the username/password I created in my control panel

?

---------------------------------------------------------

We can also rename our admin directory as well as using this?

Thanks

[Paul H.]

You will need to enter the username and password you made above, then enter your forum details at the ACP login.

You can rename your admin dir, yes.

[FooFighter]

Oh ok, thanks man

How come it only asked for me to enter in the username and password once when going to my admin panel, and when I log out and log back into it it only asks for my regular admin username/password?

Shouldn't ask every time?

* I didn't check the "remeber this password" check box upon logging in so was wondering if we only log in once and forever?

[crazy4cs]

This user has been denied support.

How come it only asked for me to enter in the username and password once when going to my admin panel, and when I log out and log back into it it only asks for my regular admin username/password?

Shouldn't ask every time?

Your question is only your answer.

When you went there for first time, you were already logged in your ACP, so it just asked htaccess pw, when you logout, it takes you to ACP's index as well but as you're not logged in, it asks for details again.