2016-03-11, 04:30 PM
2016-03-11, 10:43 PM
We've already addressed this for plugins. It is highly recommended to change the name of your admin folder to limit hacking attempts. For this to be effective, the real name of that folder should be secret, thus not shared with other forums. This means that the plugin installer would need to munge that name before overwriting your forum's filesystem. To further complicate matters, there is a honeypot admin section which asks you to rename your admin folder, but the plugin includes a fake admin folder which should not be renamed.