You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: 1.8/administration/security/protection.md
+37-30Lines changed: 37 additions & 30 deletions
Original file line number
Diff line number
Diff line change
@@ -26,67 +26,73 @@ When finished with one of the instruction sets below, browse to your Admin CP ag
26
26
27
27
Similar to Apache, but with the cPanel UI on shared hosts.
28
28
29
-
+ Search for the `Directory Privacy` menu item (icon: blue folder with lock)
30
-
+ Select the directory you wish to protect (your Admin CP directory)
31
-
+**Check** the `Password protect this directory.` checkbox.
32
-
+ Fill out the given form with a username and strong password (>85 score)
33
-
+ Click `Save`.
29
+
- Search for the `Directory Privacy` menu item (icon: blue folder with lock)
30
+
- Select the directory you wish to protect (your Admin CP directory)
31
+
-**Check** the `Password protect this directory.` checkbox.
32
+
- Fill out the given form with a username and strong password (>85 score)
33
+
- Click `Save`.
34
34
35
35
## Apache Basic Auth Configuration (with or without SSH)
36
36
37
37
Requirements:
38
-
+ SSH access to site
39
-
+ If not available, use [DynamicDrive's generator tool](http://www.tools.dynamicdrive.com/password/) and upload the files, as if you followed the directions below to create them.
40
-
+ Apache configured to allow .htaccess files to override configuration values
38
+
- SSH access to site
39
+
- If not available, use [DynamicDrive's generator tool](http://www.tools.dynamicdrive.com/password/) and upload the files, as if you followed the directions below to create them.
40
+
- Apache configured to allow .htaccess files to override configuration values
41
41
42
42
First, create a new file in the Admin CP directory named .htaccess. Apache will interpret the file as a local configuration file in the directory and any subdirectories inside of it.
- If the command is not found, install the `apache2-utils`, `httpd-utils`, or similar package for your Linux distribution.
76
+
77
+
-**NOTE:** Replace `/path/to/.htpasswd` in both places with the respective file location.
72
78
73
79
# Configuring an Admin CP PIN
74
80
75
81
With MyBB 1.8, an Admin Control Panel "Secret PIN" setting was added to the core, inspired by a popular community tutorial. To enable the PIN:
76
82
77
-
+ Open `inc/config.php`
83
+
- Open `inc/config.php`
78
84
79
-
+**FIND** or **ADD**:
85
+
-**FIND** or **ADD**:
80
86
81
-
{% highlight php startinline %}
82
-
$config['secret_pin']
83
-
{% endhighlight %}
87
+
{% highlight php startinline %}
88
+
$config['secret_pin']
89
+
{% endhighlight %}
84
90
85
-
+ Set the variable to a value, such as `'S0me p1n'`.
91
+
- Set the variable to a value, such as `'S0me p1n'`.
86
92
87
-
+**DONE**
93
+
-**DONE**
88
94
89
-
Example:
95
+
**Example:**
90
96
91
97
{% highlight php startinline %}
92
98
$config['secret_pin'] = 'S0me p1n';
@@ -104,8 +110,9 @@ Permissions for each Administrator can be configured at `Admin CP > Users & Grou
104
110
If you have multiple administrators, assign specific roles to apply a "divide and conquer" strategy across your administrators.
105
111
106
112
Examples:
107
-
+ If one is strong in design, give them access to Templates and Style ACP features, but not settings, users, or system tools. They shouldn't need them for design tasks, and if they do, they can ask someone else to perform those actions.
108
-
+ Perhaps another admin is great with managing community members. Give them access to Users and Groups, but nothing more.
113
+
114
+
- If one is strong in design, give them access to Templates and Style ACP features, but not settings, users, or system tools. They shouldn't need them for design tasks, and if they do, they can ask someone else to perform those actions.
115
+
- Perhaps another admin is great with managing community members. Give them access to Users and Groups, but nothing more.
109
116
110
117
The more features you give to each administrator, the more power you grant to each of them over your community and its security.
0 commit comments