MyBB Community Forums

Hi,

everybody can freely access the ACP login page here: http://community.mybb.com/admin/
This always have bugged me. Then I thought why not add a bit more security to the ACP? I was thinking of an optional security question that only admins know and that unlocks the ACP login screen when answered correctly.

To prevent the admins from always having to answer the security question, you can use cookies that never expire. I think you get the idea. What is your opinion of this? And if this won't be implemented in future MyBB versions, can anyone tell me how I can code this/can someone code this for me?

Best regards

I almost want to bet that the admin folder here is the ACP Honeypot plugin.

You can change the admincp location by editing the config.php file and changing "admin" to whatever you want, and then renaming the /admin/ folder to whatever you named it in the config.php.

We could be using a honeypot

And, as said above, you can change the ACP directory by renaming the folder and editing inc/config.php.

Duh!, didn't think of renaming the admin folder. That's perhaps the best solution. Thanks

plus you can add directory passwords via htaccess/htpasswd