different name for administration folder

[darek]

Eric, I slowly finish my modyfications. The script is almost done and soon will be working. As I mentioned in my previous mail I want to change the name of the administration folder. Unfortunately I get an error right in the init.php file, I guess it may have paths to some additional files or something. The init.php is encoded. Here is the error:

PHP Code:

Fatal error: main(): Failed opening .../includes/init.php on line 44 


Could you please write me a little code that would change the name "administration" in the init.php to whatever I would write, please.

[darek]

Noone unswered...
I finally did it myself

[juven14]

Great, I have thought about changing the admin folder name, what problems did you get and can you provide the solution you ended up with? I'm sure others would like to know. I think this would be useful information in the forums, if you don't mind sharing.

[Sinisa]

Hi anyone,

Darek, can you tell us how did you change the name of administration folder? I wish to do this, but not sure how.
Or... if anyone else know how to do this, I will be very appreciated.

Thanks in advanced.

[darek]

John, I could not wait for you to do the changes in my script, so I did them myself, take a look, it is still running as test but I soon move it to work, I am curious what you think about my own mods: http://lookdigital.pl/vr_class/index.php There are quite a lot of them, I needed to change the purpose the script was designed for, I also wanted some hidden things, like a mail to admin when someone registers without buying a membership and more. I needed a company catalog that will do the job of a front end script for my panorama tour script. If you want to take a look at user log in as darek, pass: darek, working panorama script is "test"

OK John, Sinisa, here is how to change the admin folder name. First of all I think it is worth it, as 68c is widly known and there are a lot of hackers waiting to make you full. When you change the folder name they will not know what to look for, so they will not be able to brake in.
When I changed the name of the administration folder, there was an error that came from init.php that is in administration/included folder, ok, I had no way to change it as it is encrypted. I contacted Eric and he was planning to change the file for me during the weekend, but I managed to do it myself, so there is no point for him to do that extra work.
So, since I can't change that file I left it where it was. Yes I did not delete the administration folder, it is still there and the init.php and other functions are still inside included folder, but I removed all php files and put them inside another folder, these files needed images to have next to them too, then I edited index.php and login.php and also pages.php

PHP Code:

this line:
$class_tpl->assign('body','../../administration/templates/pages/pagesform.tpl.php'); 


I protected administration folder with .htaccess http://www.4webhelp.net/tutorials/misc/htaccess.php but I did not put there any .htpasswd so I think it is just not possible to brake in. Even if it were possible, there are no admin files, they are in a different folder.

So, once again in short.
leave the administration folder
it should have:
- documentation (probably)
- includes
- language
- .htaccess
- templates

then create another folder (at the moment my admin folder is here: http://lookdigital.pl/vr_class/admin )
it shoul include:
- all admin files
- images
- script
then you need to edit 3 files: index.php, login.php, pages.php

And it's done.

[Sinisa]

Thanks a lot Darek.
Seems there is a lot of work to do. But, it's worth, because everyone can find administration folder very easy.
Hmm... if there is no easier way, I will do like you did. But I still hope there is some other easier way to protect administration from peoples eyes.

[Eric Barnes]

Right now I believe this is going to be the only option. For v4 I will include a special way to rename it.

[darek]

Sinisa, it is really simple, you know the way, create a folder and move php files, script folder and images folder there, then open index.php and login.php, find in lines "administration" name (at the beginning), then change the name to the new name of your folder, page.php has 3 lines at 3/4 of the code with this:

PHP Code:

pages/pagesform.tpl.php 


then you need to change this address to:

PHP Code:

../../administration/templates/pages/pagesform.tpl.php 


And this is it.
If it were possible to edit init.php, changes would be much more complicated and in several more files. This mod probably doeas the job best with minimum work.
There is one more thing that should be edited - this is probably in all tamplates (normal, not administration) that call admin when you are logged as admin, but I decided to leave it the way it is as this could show to a hacker the name of my admin folder.

[Sinisa]

Well, I just password protect administration folder. So, if someone wish to login, then he/she need to brake this user name and password first. Then, after login, he/she will see admin section, but still need login parameters to step in.

Here it is: www.moj-oglasnik.com/administration

And it works. It's more simple

Thanks anyway.

[darek]

this means, a hacker will have to brake twice, but what if he does?