Skip to content
Grav 2.1 is out: every page speaks Markdown. Read the announcement →

Htpasswd for admin-plugin?

Started by Muut Archive 10 years ago · 3 replies · 645 views
10 years ago

Is there a way to secure the /admin url with htpasswd?

Since 'admin' is not a folder in the file system I can't drop a .htaccess/.htpasswd file there...

In the documentation there is a description how to rename the /admin slug. Is this the only way to make the admin plugin more secure?

10 years ago

I have not tried using an apache protected area, but for example you can allow access only from your IP adding in your .htaccess:

TXT
<files admin>
    order deny,allow
    deny from all
    allow from your-ip-address
</files>
10 years ago

@flaviocopes
Since my IP changes it's not a solution for my case.

Would you say changing the 'admin' slug is secure enough?

10 years ago

I guess it depends on your slug... At least 8 characters maybe: 1aD-*nY7

Suggested topics

Topic Participants Replies Views Activity
Archive · by Deleted User, 9 years ago
0 2283 9 years ago
Archive · by Muut Archive, 9 years ago
2 1498 9 years ago
Archive · by Muut Archive, 9 years ago
2 4748 9 years ago
Archive · by Muut Archive, 9 years ago
1 3563 9 years ago
Archive · by Muut Archive, 9 years ago
3 1623 9 years ago