EG's Wickied Idea for vBulliten Admin CP Protection :)

[EvilGenius]

Hey Guys!

I was googling vB Admincp .htaccess and the following idea hit me!

Can work in any kind of Admin Envirnoment.

Lets consider there is 1 Main Admin and 2 Co-Admins

Co-Admins don't have access to database backup and plugins etc...

Basically what you do is make a copy of Admincp folder and then rename the one for Main Admin to something you only know.

And you can leave the 2nd copy as Admincp (default, or if you have changed it in config.php)

1) Main Admin doesn't need to change anything.

2) For Co-Admins - You delete the options you don't want them to access (even tho you haven't given them access to) for example backup.php, plugin.php, accessmaskh.php, blahblah.php how ever it suites your needs.

Now the best thing of the idea is, they can't do shit even if they hack in (or you get hacked by external entity) and somehow change their privileges since they won't know where your Main AdminCP is and with the missing files its a dead end.

For Added Security you can use the .htaccess method too (which by the way i'll very thankful if someone can share).

---

I've tried making 2 Admincp and deleted files from one, and worked great :-)


So, what do you think fellas?

EvilGenius Reviewed by EvilGenius on 6th Dec 2009. EG's Wickied Idea for vBulliten Admin CP Protection :) Hey Guys! I was googling vB Admincp .htaccess and the following idea hit me! Can work in any kind of Admin Envirnoment. Lets consider there is 1 Main Admin and 2 Co-Admins Co-Admins don't have access to database backup and plugins etc... Rating: 5

[jayfella]

you can easily get the tree of the public_HTML, so if your relying on that, its not a good idea.

[DeLeTeD]

you can easily get the tree of the public_HTML, so if your relying on that, its not a good idea.

yea this method really doesn't help a whole lot

[EvilGenius]

You're right but you can disable the Dir. Listing ..?

I didn't consider that...

[ieatlinux]

This is similar to what WHMCS does...

[EvilGenius]

never used it